@danielszlaski/envguard 0.1.3 → 0.1.5

package/dist/commands/fix.js

@@ -43,8 +43,18 @@ const logger_1 = require("../utils/logger");
 async function fixCommand() {
     const rootDir = process.cwd();
     logger_1.Logger.startSpinner('Generating .env.example files...');
+    // Load configuration
+    const { ConfigLoader } = require('../config/configLoader');
+    const config = ConfigLoader.loadConfig(rootDir);
     // Step 1: Find all .env files
-    const scanner = new codeScanner_1.CodeScanner(rootDir);
+    const excludePatterns = [
+        'node_modules',
+        'dist',
+        'build',
+        '.git',
+        ...(config.exclude || []),
+    ];
+    const scanner = new codeScanner_1.CodeScanner(rootDir, excludePatterns);
     const envFiles = await scanner.findEnvFiles();
     logger_1.Logger.stopSpinner();
     if (envFiles.length === 0) {
@@ -64,7 +74,18 @@ async function fixCommand() {
         const displayPath = relativePath || '.';
         logger_1.Logger.path(`Processing ${displayPath}/`);
         // Step 3: Scan code files in this directory and subdirectories
-        const usedVars = await scanDirectoryForVars(rootDir, envDir, scanner);
+        const allUsedVars = await scanDirectoryForVars(rootDir, envDir, scanner, config.exclude);
+        // Filter out ignored variables based on config (they shouldn't be in .env.example)
+        const { isKnownRuntimeVar } = require('../constants/knownEnvVars');
+        const usedVars = new Map();
+        for (const [varName, usage] of allUsedVars.entries()) {
+            const isCustomIgnored = ConfigLoader.shouldIgnoreVar(varName, config);
+            const isRuntimeVar = isKnownRuntimeVar(varName);
+            // Skip known runtime variables and custom ignore vars
+            if (!isRuntimeVar && !isCustomIgnored) {
+                usedVars.set(varName, usage);
+            }
+        }
         if (usedVars.size === 0) {
             logger_1.Logger.info('No environment variables found in code', true);
             logger_1.Logger.blank();
@@ -93,25 +114,29 @@ async function fixCommand() {
     logger_1.Logger.summary(`Generated ${envFiles.length} .env.example file(s) with ${totalVars} total variables`);
     return { success: true };
 }
-async function scanDirectoryForVars(rootDir, targetDir, scanner) {
+async function scanDirectoryForVars(rootDir, targetDir, scanner, excludePatterns = []) {
     const envVars = new Map();
     const { glob } = require('glob');
     // Find all code files in this directory and subdirectories
     const relativeDir = path.relative(rootDir, targetDir);
     const pattern = relativeDir ? `${relativeDir}/**/*.{js,ts,jsx,tsx,mjs,cjs}` : '**/*.{js,ts,jsx,tsx,mjs,cjs}';
+    const defaultIgnore = ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'];
+    const customIgnore = excludePatterns.map(p => p.includes('*') ? p : `**/${p}/**`);
     const files = await glob(pattern, {
         cwd: rootDir,
-        ignore: ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'],
+        ignore: [...defaultIgnore, ...customIgnore],
         absolute: true,
     });
     for (const file of files) {
         const vars = await scanner.scanFile(file);
-        for (const varName of vars) {
+        for (const [varName, hasFallback] of vars.entries()) {
             const relativePath = path.relative(rootDir, file);
             if (!envVars.has(varName)) {
-                envVars.set(varName, []);
+                envVars.set(varName, { locations: [], hasFallback: false });
             }
-            envVars.get(varName).push(relativePath);
+            const entry = envVars.get(varName);
+            entry.locations.push(relativePath);
+            entry.hasFallback = entry.hasFallback || hasFallback;
         }
     }
     return envVars;

package/dist/commands/fix.js.map

@@ -1 +1 @@
-{"version":3,"file":"fix.js","sourceRoot":"","sources":["../../src/commands/fix.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,gCAwEC;AA/ED,2CAA6B;AAC7B,uCAAyB;AACzB,wDAAqD;AACrD,mDAAgD;AAChD,yDAAsD;AACtD,4CAAyC;AAElC,KAAK,UAAU,UAAU;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE9B,eAAM,CAAC,YAAY,CAAC,kCAAkC,CAAC,CAAC;IAExD,8BAA8B;IAC9B,MAAM,OAAO,GAAG,IAAI,yBAAW,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;IAE9C,eAAM,CAAC,WAAW,EAAE,CAAC;IAErB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,eAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACrD,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,eAAM,CAAC,OAAO,CAAC,SAAS,QAAQ,CAAC,MAAM,eAAe,CAAC,CAAC;IACxD,eAAM,CAAC,KAAK,EAAE,CAAC;IAEf,MAAM,MAAM,GAAG,IAAI,qBAAS,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,yBAAW,EAAE,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,iCAAiC;IACjC,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,YAAY,IAAI,GAAG,CAAC;QAExC,eAAM,CAAC,IAAI,CAAC,cAAc,WAAW,GAAG,CAAC,CAAC;QAE1C,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEtE,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,eAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;YAC5D,eAAM,CAAC,KAAK,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QAED,eAAM,CAAC,OAAO,CAAC,SAAS,QAAQ,CAAC,IAAI,qCAAqC,EAAE,IAAI,CAAC,CAAC;QAClF,eAAM,CAAC,KAAK,EAAE,CAAC;QAEf,2DAA2D;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAElD,4CAA4C;QAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAE9E,gCAAgC;QAChC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEnD,eAAM,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzE,eAAM,CAAC,KAAK,EAAE,CAAC;QAEf,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC;QAE3B,0CAA0C;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,eAAM,CAAC,OAAO,CAAC,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxE,eAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,eAAM,CAAC,OAAO,CAAC,aAAa,QAAQ,CAAC,MAAM,8BAA8B,SAAS,kBAAkB,CAAC,CAAC;IAEtG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,SAAiB,EACjB,OAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjC,2DAA2D;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,+BAA+B,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAE7G,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;QAChC,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC;QACzE,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAO,OAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"fix.js","sourceRoot":"","sources":["../../src/commands/fix.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,gCAiGC;AAxGD,2CAA6B;AAC7B,uCAAyB;AACzB,wDAAqD;AACrD,mDAAgD;AAChD,yDAAsD;AACtD,4CAAyC;AAElC,KAAK,UAAU,UAAU;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE9B,eAAM,CAAC,YAAY,CAAC,kCAAkC,CAAC,CAAC;IAExD,qBAAqB;IACrB,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAEhD,8BAA8B;IAC9B,MAAM,eAAe,GAAG;QACtB,cAAc;QACd,MAAM;QACN,OAAO;QACP,MAAM;QACN,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;KAC1B,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,yBAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;IAE9C,eAAM,CAAC,WAAW,EAAE,CAAC;IAErB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,eAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACrD,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,eAAM,CAAC,OAAO,CAAC,SAAS,QAAQ,CAAC,MAAM,eAAe,CAAC,CAAC;IACxD,eAAM,CAAC,KAAK,EAAE,CAAC;IAEf,MAAM,MAAM,GAAG,IAAI,qBAAS,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,yBAAW,EAAE,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,iCAAiC;IACjC,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,YAAY,IAAI,GAAG,CAAC;QAExC,eAAM,CAAC,IAAI,CAAC,cAAc,WAAW,GAAG,CAAC,CAAC;QAE1C,+DAA+D;QAC/D,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAEzF,mFAAmF;QACnF,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyD,CAAC;QAElF,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACtE,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAEhD,sDAAsD;YACtD,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;gBACtC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,eAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;YAC5D,eAAM,CAAC,KAAK,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QAED,eAAM,CAAC,OAAO,CAAC,SAAS,QAAQ,CAAC,IAAI,qCAAqC,EAAE,IAAI,CAAC,CAAC;QAClF,eAAM,CAAC,KAAK,EAAE,CAAC;QAEf,2DAA2D;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAElD,4CAA4C;QAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAE9E,gCAAgC;QAChC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEnD,eAAM,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzE,eAAM,CAAC,KAAK,EAAE,CAAC;QAEf,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC;QAE3B,0CAA0C;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,eAAM,CAAC,OAAO,CAAC,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxE,eAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,eAAM,CAAC,OAAO,CAAC,aAAa,QAAQ,CAAC,MAAM,8BAA8B,SAAS,kBAAkB,CAAC,CAAC;IAEtG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,SAAiB,EACjB,OAAoB,EACpB,kBAA4B,EAAE;IAE9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyD,CAAC;IACjF,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjC,2DAA2D;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,+BAA+B,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAE7G,MAAM,aAAa,GAAG,CAAC,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;QAChC,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC;QAC3C,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAO,OAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YACpC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/install-hook.d.ts

@@ -0,0 +1,18 @@
+declare const HOOK_TYPES: readonly ["pre-commit", "pre-push"];
+type HookType = typeof HOOK_TYPES[number];
+interface InstallHookOptions {
+    type?: HookType;
+    force?: boolean;
+}
+/**
+ * Install a Git hook that runs envguard before commits or pushes
+ */
+export declare function installHookCommand(options?: InstallHookOptions): Promise<void>;
+/**
+ * Uninstall a Git hook
+ */
+export declare function uninstallHookCommand(options?: {
+    type?: HookType;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=install-hook.d.ts.map

package/dist/commands/install-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-hook.d.ts","sourceRoot":"","sources":["../../src/commands/install-hook.ts"],"names":[],"mappings":"AAIA,QAAA,MAAM,UAAU,qCAAsC,CAAC;AACvD,KAAK,QAAQ,GAAG,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAE1C,UAAU,kBAAkB;IAC1B,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,kBAAuB,iBA8CxE;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAA;CAAO,iBA6B3E"}

package/dist/commands/install-hook.js

@@ -0,0 +1,148 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installHookCommand = installHookCommand;
+exports.uninstallHookCommand = uninstallHookCommand;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const logger_1 = require("../utils/logger");
+const HOOK_TYPES = ['pre-commit', 'pre-push'];
+/**
+ * Install a Git hook that runs envguard before commits or pushes
+ */
+async function installHookCommand(options = {}) {
+    const rootDir = process.cwd();
+    const gitDir = path.join(rootDir, '.git');
+    const hooksDir = path.join(gitDir, 'hooks');
+    // Check if this is a git repository
+    if (!fs.existsSync(gitDir)) {
+        logger_1.Logger.error('Not a git repository. Please run this command in a git repository.');
+        logger_1.Logger.blank();
+        process.exit(1);
+    }
+    // Ensure hooks directory exists
+    if (!fs.existsSync(hooksDir)) {
+        fs.mkdirSync(hooksDir, { recursive: true });
+        logger_1.Logger.success('Created .git/hooks directory');
+    }
+    const hookType = options.type || 'pre-commit';
+    const hookPath = path.join(hooksDir, hookType);
+    // Check if hook already exists
+    if (fs.existsSync(hookPath) && !options.force) {
+        logger_1.Logger.warning(`${hookType} hook already exists.`);
+        logger_1.Logger.info('Use --force to overwrite the existing hook', true);
+        logger_1.Logger.blank();
+        process.exit(1);
+    }
+    // Create the hook script
+    const hookContent = generateHookScript(hookType);
+    try {
+        fs.writeFileSync(hookPath, hookContent, { mode: 0o755 });
+        logger_1.Logger.success(`Installed ${hookType} hook successfully!`);
+        logger_1.Logger.blank();
+        logger_1.Logger.info('The hook will run `envguard check` automatically before each ' +
+            (hookType === 'pre-commit' ? 'commit' : 'push'), true);
+        logger_1.Logger.info('To bypass the hook, use: git ' +
+            (hookType === 'pre-commit' ? 'commit' : 'push') + ' --no-verify', true);
+        logger_1.Logger.blank();
+    }
+    catch (error) {
+        logger_1.Logger.error(`Failed to install hook: ${error}`);
+        logger_1.Logger.blank();
+        process.exit(1);
+    }
+}
+/**
+ * Uninstall a Git hook
+ */
+async function uninstallHookCommand(options = {}) {
+    const rootDir = process.cwd();
+    const hookType = options.type || 'pre-commit';
+    const hookPath = path.join(rootDir, '.git', 'hooks', hookType);
+    if (!fs.existsSync(hookPath)) {
+        logger_1.Logger.warning(`No ${hookType} hook found.`);
+        logger_1.Logger.blank();
+        return;
+    }
+    // Check if it's our hook
+    const hookContent = fs.readFileSync(hookPath, 'utf-8');
+    if (!hookContent.includes('envguard check')) {
+        logger_1.Logger.warning(`The ${hookType} hook exists but was not created by envguard.`);
+        logger_1.Logger.info('Manual removal required if you want to delete it.', true);
+        logger_1.Logger.blank();
+        return;
+    }
+    try {
+        fs.unlinkSync(hookPath);
+        logger_1.Logger.success(`Removed ${hookType} hook successfully!`);
+        logger_1.Logger.blank();
+    }
+    catch (error) {
+        logger_1.Logger.error(`Failed to remove hook: ${error}`);
+        logger_1.Logger.blank();
+        process.exit(1);
+    }
+}
+/**
+ * Generate the hook script content
+ */
+function generateHookScript(hookType) {
+    const hookMessage = hookType === 'pre-commit' ? 'commit' : 'push';
+    return `#!/bin/sh
+# EnvGuard ${hookType} hook
+# This hook runs envguard to check environment variables before ${hookMessage}
+# To bypass this hook, use: git ${hookMessage} --no-verify
+
+echo "Running EnvGuard environment variable check..."
+
+# Run envguard check
+npx envguard check
+
+# Capture the exit code
+EXIT_CODE=$?
+
+if [ $EXIT_CODE -ne 0 ]; then
+  echo ""
+  echo "❌ EnvGuard check failed. Please fix the issues above before ${hookMessage}ing."
+  echo "   Or run: git ${hookMessage} --no-verify to bypass this check."
+  echo ""
+  exit 1
+fi
+
+echo "✓ EnvGuard check passed!"
+exit 0
+`;
+}
+//# sourceMappingURL=install-hook.js.map

package/dist/commands/install-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-hook.js","sourceRoot":"","sources":["../../src/commands/install-hook.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,gDA8CC;AAKD,oDA6BC;AA/FD,uCAAyB;AACzB,2CAA6B;AAC7B,4CAAyC;AAEzC,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,UAAU,CAAU,CAAC;AAQvD;;GAEG;AACI,KAAK,UAAU,kBAAkB,CAAC,UAA8B,EAAE;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE5C,oCAAoC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,eAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACnF,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,eAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/C,+BAA+B;IAC/B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,eAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,uBAAuB,CAAC,CAAC;QACnD,eAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,IAAI,CAAC,CAAC;QAChE,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,eAAM,CAAC,OAAO,CAAC,aAAa,QAAQ,qBAAqB,CAAC,CAAC;QAC3D,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,IAAI,CAAC,+DAA+D;YAC/D,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACnE,eAAM,CAAC,IAAI,CAAC,+BAA+B;YAC/B,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,EAAE,IAAI,CAAC,CAAC;QACpF,eAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;QACjD,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,oBAAoB,CAAC,UAA+B,EAAE;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,eAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,cAAc,CAAC,CAAC;QAC7C,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5C,eAAM,CAAC,OAAO,CAAC,OAAO,QAAQ,+CAA+C,CAAC,CAAC;QAC/E,eAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,IAAI,CAAC,CAAC;QACvE,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxB,eAAM,CAAC,OAAO,CAAC,WAAW,QAAQ,qBAAqB,CAAC,CAAC;QACzD,eAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;QAChD,eAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,MAAM,WAAW,GAAG,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAElE,OAAO;aACI,QAAQ;kEAC6C,WAAW;kCAC3C,WAAW;;;;;;;;;;;;sEAYyB,WAAW;yBACxD,WAAW;;;;;;;CAOnC,CAAC;AACF,CAAC"}

package/dist/commands/scan.d.ts

@@ -2,6 +2,7 @@ import { Issue } from '../types';
 export declare function scanCommand(options: {
     ci?: boolean;
     strict?: boolean;
+    detectFallbacks?: boolean;
 }): Promise<{
     success: boolean;
     issues: Issue[];

package/dist/commands/scan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAKjC,wBAAsB,WAAW,CAAC,OAAO,EAAE;IAAE,EAAE,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;;;GAmO5E"}
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAKjC,wBAAsB,WAAW,CAAC,OAAO,EAAE;IAAE,EAAE,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE;;;GAgVvG"}

package/dist/commands/scan.js

@@ -49,9 +49,17 @@ async function scanCommand(options) {
     const config = configLoader_1.ConfigLoader.loadConfig(rootDir);
     // CLI options override config file
     const strictMode = options.strict !== undefined ? options.strict : config.strict;
+    const detectFallbacks = options.detectFallbacks !== undefined ? options.detectFallbacks : (config.detectFallbacks !== undefined ? config.detectFallbacks : true);
     logger_1.Logger.startSpinner('Scanning codebase for environment variables...');
     // Step 1: Find all .env files and serverless.yml files
-    const scanner = new codeScanner_1.CodeScanner(rootDir);
+    const excludePatterns = [
+        'node_modules',
+        'dist',
+        'build',
+        '.git',
+        ...(config.exclude || []),
+    ];
+    const scanner = new codeScanner_1.CodeScanner(rootDir, excludePatterns);
     const envFiles = await scanner.findEnvFiles();
     const serverlessFiles = await scanner.findServerlessFiles();
     logger_1.Logger.stopSpinner();
@@ -76,7 +84,7 @@ async function scanCommand(options) {
         const serverlessVars = serverlessParser.parse(serverlessFilePath);
         logger_1.Logger.info(`Found ${serverlessVars.size} variable(s) in serverless.yml`, true);
         // Scan code files in this directory to see what's actually used
-        const usedVars = await scanDirectoryForCodeVars(rootDir, serverlessDir, scanner);
+        const usedVars = await scanDirectoryForCodeVars(rootDir, serverlessDir, scanner, config.exclude);
         logger_1.Logger.info(`Found ${usedVars.size} variable(s) used in code`, true);
         logger_1.Logger.blank();
         // Check for unused variables in serverless.yml
@@ -93,7 +101,7 @@ async function scanCommand(options) {
         // Check for variables used in code but not defined in serverless.yml
         const missingFromServerless = [];
         const skippedRuntimeVars = [];
-        for (const [varName, locations] of usedVars.entries()) {
+        for (const [varName, usage] of usedVars.entries()) {
             if (!serverlessVars.has(varName)) {
                 // In non-strict mode, skip known runtime variables and custom ignore vars
                 const isCustomIgnored = configLoader_1.ConfigLoader.shouldIgnoreVar(varName, config);
@@ -105,16 +113,17 @@ async function scanCommand(options) {
                     }
                 }
                 else {
-                    missingFromServerless.push({ varName, locations });
+                    missingFromServerless.push({ varName, locations: usage.locations, hasFallback: usage.hasFallback });
                 }
             }
         }
         if (unusedServerlessVars.length > 0) {
-            logger_1.Logger.warning('Unused variables in serverless.yml:', true);
+            logger_1.Logger.info('Unused variables in serverless.yml:', true);
             unusedServerlessVars.forEach((varName) => {
-                logger_1.Logger.warningItem(varName, 2);
+                logger_1.Logger.infoItem(varName, 2);
                 allIssues.push({
                     type: 'unused',
+                    severity: 'info',
                     varName,
                     details: `Defined in serverless.yml but never used in code`,
                 });
@@ -122,20 +131,46 @@ async function scanCommand(options) {
             logger_1.Logger.blank();
         }
         if (missingFromServerless.length > 0) {
-            logger_1.Logger.error('Missing from serverless.yml:', true);
-            missingFromServerless.forEach((item) => {
-                logger_1.Logger.errorItem(item.varName, 2);
-                if (item.locations && item.locations.length > 0) {
-                    logger_1.Logger.info(`Used in: ${item.locations.slice(0, 2).join(', ')}`, true);
-                }
-                allIssues.push({
-                    type: 'missing',
-                    varName: item.varName,
-                    details: `Used in code but not defined in serverless.yml`,
-                    locations: item.locations,
+            // Group by severity (respect detectFallbacks config)
+            const errors = missingFromServerless.filter(item => !detectFallbacks || !item.hasFallback);
+            const warnings = missingFromServerless.filter(item => detectFallbacks && item.hasFallback);
+            if (errors.length > 0) {
+                logger_1.Logger.error('Missing from serverless.yml:', true);
+                errors.forEach((item) => {
+                    logger_1.Logger.errorItem(item.varName, 2);
+                    if (item.locations && item.locations.length > 0) {
+                        logger_1.Logger.info(`Used in: ${item.locations.slice(0, 2).join(', ')}`, true);
+                    }
+                    const details = (detectFallbacks && item.hasFallback)
+                        ? `Used in code with fallback but not defined in serverless.yml`
+                        : `Used in code but not defined in serverless.yml`;
+                    allIssues.push({
+                        type: 'missing',
+                        severity: 'error',
+                        varName: item.varName,
+                        details,
+                        locations: item.locations,
+                    });
                 });
-            });
-            logger_1.Logger.blank();
+                logger_1.Logger.blank();
+            }
+            if (warnings.length > 0) {
+                logger_1.Logger.warning('Missing from serverless.yml (with fallback):', true);
+                warnings.forEach((item) => {
+                    logger_1.Logger.warningItem(item.varName, 2);
+                    if (item.locations && item.locations.length > 0) {
+                        logger_1.Logger.info(`Used in: ${item.locations.slice(0, 2).join(', ')}`, true);
+                    }
+                    allIssues.push({
+                        type: 'missing',
+                        severity: 'warning',
+                        varName: item.varName,
+                        details: `Used in code with fallback but not defined in serverless.yml`,
+                        locations: item.locations,
+                    });
+                });
+                logger_1.Logger.blank();
+            }
         }
         if (unusedServerlessVars.length === 0 && missingFromServerless.length === 0) {
             logger_1.Logger.success('No issues in this serverless.yml', true);
@@ -166,7 +201,24 @@ async function scanCommand(options) {
         logger_1.Logger.path(`Checking ${displayPath}/`);
         logger_1.Logger.blank();
         // Step 3: Scan code files in this directory and subdirectories
-        const usedVars = await scanDirectoryForVars(rootDir, envDir, scanner);
+        const allUsedVars = await scanDirectoryForVars(rootDir, envDir, scanner, config.exclude);
+        // Filter out ignored variables based on config
+        const usedVars = new Map();
+        const skippedVarsInScope = [];
+        for (const [varName, usage] of allUsedVars.entries()) {
+            const isCustomIgnored = configLoader_1.ConfigLoader.shouldIgnoreVar(varName, config);
+            const isRuntimeVar = (0, knownEnvVars_1.isKnownRuntimeVar)(varName);
+            // In non-strict mode, skip known runtime variables and custom ignore vars
+            if (strictMode || (!isRuntimeVar && !isCustomIgnored)) {
+                usedVars.set(varName, usage);
+            }
+            else {
+                const category = isCustomIgnored ? 'Custom (from config)' : (0, knownEnvVars_1.getRuntimeVarCategory)(varName);
+                if (category) {
+                    skippedVarsInScope.push({ varName, category });
+                }
+            }
+        }
         logger_1.Logger.info(`Found ${usedVars.size} variable(s) used in this scope`, true);
         // Step 4: Parse .env file
         const definedVars = parser.parse(envFilePath);
@@ -177,15 +229,17 @@ async function scanCommand(options) {
         logger_1.Logger.info(`Found ${exampleVars.size} variable(s) in .env.example`, true);
         logger_1.Logger.blank();
         // Step 6: Analyze and find issues
-        const result = analyzer.analyze(usedVars, definedVars, exampleVars);
+        const result = analyzer.analyze(usedVars, definedVars, exampleVars, detectFallbacks);
         if (result.issues.length > 0) {
-            // Group issues by type
-            const missingIssues = result.issues.filter(i => i.type === 'missing');
+            // Group issues by type and severity
+            const missingErrors = result.issues.filter(i => i.type === 'missing' && i.severity === 'error');
+            const missingWarnings = result.issues.filter(i => i.type === 'missing' && i.severity === 'warning');
             const unusedIssues = result.issues.filter(i => i.type === 'unused');
-            const undocumentedIssues = result.issues.filter(i => i.type === 'undocumented');
-            if (missingIssues.length > 0) {
+            const undocumentedWarnings = result.issues.filter(i => i.type === 'undocumented' && i.severity === 'warning');
+            const undocumentedInfo = result.issues.filter(i => i.type === 'undocumented' && i.severity === 'info');
+            if (missingErrors.length > 0) {
                 logger_1.Logger.error('Missing from .env:', true);
-                missingIssues.forEach((issue) => {
+                missingErrors.forEach((issue) => {
                     logger_1.Logger.errorItem(issue.varName, 2);
                     if (issue.locations && issue.locations.length > 0) {
                         logger_1.Logger.info(`Used in: ${issue.locations.slice(0, 2).join(', ')}`, true);
@@ -193,16 +247,33 @@ async function scanCommand(options) {
                 });
                 logger_1.Logger.blank();
             }
+            if (missingWarnings.length > 0) {
+                logger_1.Logger.warning('Missing from .env (with fallback):', true);
+                missingWarnings.forEach((issue) => {
+                    logger_1.Logger.warningItem(issue.varName, 2);
+                    if (issue.locations && issue.locations.length > 0) {
+                        logger_1.Logger.info(`Used in: ${issue.locations.slice(0, 2).join(', ')}`, true);
+                    }
+                });
+                logger_1.Logger.blank();
+            }
             if (unusedIssues.length > 0) {
-                logger_1.Logger.warning('Unused variables:', true);
+                logger_1.Logger.info('Unused variables:', true);
                 unusedIssues.forEach((issue) => {
+                    logger_1.Logger.infoItem(issue.varName, 2);
+                });
+                logger_1.Logger.blank();
+            }
+            if (undocumentedWarnings.length > 0) {
+                logger_1.Logger.warning('Missing from .env.example:', true);
+                undocumentedWarnings.forEach((issue) => {
                     logger_1.Logger.warningItem(issue.varName, 2);
                 });
                 logger_1.Logger.blank();
             }
-            if (undocumentedIssues.length > 0) {
-                logger_1.Logger.info('Missing from .env.example:', true);
-                undocumentedIssues.forEach((issue) => {
+            if (undocumentedInfo.length > 0) {
+                logger_1.Logger.info('Missing from .env.example (with fallback):', true);
+                undocumentedInfo.forEach((issue) => {
                     logger_1.Logger.infoItem(issue.varName, 2);
                 });
                 logger_1.Logger.blank();
@@ -213,6 +284,22 @@ async function scanCommand(options) {
             logger_1.Logger.success('No issues in this directory', true);
             logger_1.Logger.blank();
         }
+        // Show skipped variables in non-strict mode
+        if (!strictMode && skippedVarsInScope.length > 0) {
+            logger_1.Logger.info('Skipped known runtime/ignored variables (use --strict to show):', true);
+            // Group by category
+            const grouped = new Map();
+            for (const { varName, category } of skippedVarsInScope) {
+                if (!grouped.has(category)) {
+                    grouped.set(category, []);
+                }
+                grouped.get(category).push(varName);
+            }
+            for (const [category, vars] of grouped.entries()) {
+                logger_1.Logger.info(`${category}: ${vars.join(', ')}`, true);
+            }
+            logger_1.Logger.blank();
+        }
     }
     // Display summary
     logger_1.Logger.divider();
@@ -220,8 +307,22 @@ async function scanCommand(options) {
         logger_1.Logger.summary('No issues found! All environment variables are in sync.');
         return { success: true, issues: [] };
     }
+    // Count issues by severity
+    const errorCount = allIssues.filter(i => i.severity === 'error').length;
+    const warningCount = allIssues.filter(i => i.severity === 'warning').length;
+    const infoCount = allIssues.filter(i => i.severity === 'info').length;
+    logger_1.Logger.blank();
+    if (errorCount > 0) {
+        logger_1.Logger.error(`Errors: ${errorCount}`, false);
+    }
+    if (warningCount > 0) {
+        logger_1.Logger.warning(`Warnings: ${warningCount}`, false);
+    }
+    if (infoCount > 0) {
+        logger_1.Logger.info(`Info: ${infoCount}`, false);
+    }
     logger_1.Logger.blank();
-    logger_1.Logger.warning(`Total: ${allIssues.length} issue(s) across ${envFiles.length} location(s)`);
+    logger_1.Logger.warning(`Total: ${allIssues.length} issue(s) across ${envFiles.length + serverlessFiles.length} location(s)`);
     logger_1.Logger.blank();
     // Suggest fix
     if (!options.ci) {
@@ -236,47 +337,55 @@ async function scanCommand(options) {
     }
     return { success: false, issues: allIssues };
 }
-async function scanDirectoryForVars(rootDir, targetDir, scanner) {
+async function scanDirectoryForVars(rootDir, targetDir, scanner, excludePatterns = []) {
     const envVars = new Map();
     // Find all code files in this directory and subdirectories
     const relativeDir = path.relative(rootDir, targetDir);
     const pattern = relativeDir ? `${relativeDir}/**/*.{js,ts,jsx,tsx,mjs,cjs}` : '**/*.{js,ts,jsx,tsx,mjs,cjs}';
+    const defaultIgnore = ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'];
+    const customIgnore = excludePatterns.map(p => p.includes('*') ? p : `**/${p}/**`);
     const files = await (0, glob_1.glob)(pattern, {
         cwd: rootDir,
-        ignore: ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'],
+        ignore: [...defaultIgnore, ...customIgnore],
         absolute: true,
     });
     for (const file of files) {
         const vars = await scanner.scanFile(file);
-        for (const varName of vars) {
+        for (const [varName, hasFallback] of vars.entries()) {
             const relativePath = path.relative(rootDir, file);
             if (!envVars.has(varName)) {
-                envVars.set(varName, []);
+                envVars.set(varName, { locations: [], hasFallback: false });
             }
-            envVars.get(varName).push(relativePath);
+            const entry = envVars.get(varName);
+            entry.locations.push(relativePath);
+            entry.hasFallback = entry.hasFallback || hasFallback;
         }
     }
     return envVars;
 }
 // Scan only code files (JS/TS), not including serverless.yml as a source
-async function scanDirectoryForCodeVars(rootDir, targetDir, scanner) {
+async function scanDirectoryForCodeVars(rootDir, targetDir, scanner, excludePatterns = []) {
     const envVars = new Map();
     // Find all code files in this directory only (not subdirectories for serverless)
     const relativeDir = path.relative(rootDir, targetDir);
     const pattern = relativeDir ? `${relativeDir}/**/*.{js,ts,jsx,tsx,mjs,cjs}` : '**/*.{js,ts,jsx,tsx,mjs,cjs}';
+    const defaultIgnore = ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'];
+    const customIgnore = excludePatterns.map(p => p.includes('*') ? p : `**/${p}/**`);
     const files = await (0, glob_1.glob)(pattern, {
         cwd: rootDir,
-        ignore: ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'],
+        ignore: [...defaultIgnore, ...customIgnore],
         absolute: true,
     });
     for (const file of files) {
         const vars = await scanner.scanFile(file);
-        for (const varName of vars) {
+        for (const [varName, hasFallback] of vars.entries()) {
             const relativePath = path.relative(rootDir, file);
             if (!envVars.has(varName)) {
-                envVars.set(varName, []);
+                envVars.set(varName, { locations: [], hasFallback: false });
             }
-            envVars.get(varName).push(relativePath);
+            const entry = envVars.get(varName);
+            entry.locations.push(relativePath);
+            entry.hasFallback = entry.hasFallback || hasFallback;
         }
     }
     return envVars;