@dotsec/core 5.0.0-feat-init-kms-validation.8b08ffb → 5.0.0-feat-local-encryption.bae90e1

package/README.md

@@ -37,6 +37,32 @@ const formatted = format('FOO=bar\n');
 // 'FOO=bar\n'
 ```
 
+### Schema operations
+
+```js
+import {
+  validateAgainstSchema, formatBySchema, discoverSchema,
+  loadSchema, parseSchema, schemaToJsonSchema, schemaToTypescript
+} from '@dotsec/core';
+import { readFileSync } from 'node:fs';
+
+// Discover and load a schema file
+const schemaPath = discoverSchema('.sec');           // finds dotsec.schema or null
+const schemaEntries = loadSchema();                  // parses discovered schema or null
+
+// Validate .env against a schema
+const source = readFileSync('.env', 'utf8');
+const schemaSource = readFileSync('dotsec.schema', 'utf8');
+const errors = validateAgainstSchema(source, schemaSource);
+
+// Reorder .env to match schema key ordering
+const reordered = formatBySchema(source, schemaSource);
+
+// Code generation from schema
+const jsonSchema = schemaToJsonSchema(schemaSource);   // JSON Schema (draft-07) string
+const typescript = schemaToTypescript(schemaSource);    // TypeScript declarations
+```
+
 ## Supported directives
 
 - `@encrypt` / `@plaintext` — mark variables for encryption
@@ -45,7 +71,7 @@ const formatted = format('FOO=bar\n');
 - `@push=aws-ssm|aws-secrets-manager` — push targets with options
 - `@provider`, `@key-id`, `@region` — file-level encryption config
 
-See the [full documentation](https://jpwesselink.github.io/dotsec-rs/beta/guide/directives.html) for details.
+See the [full documentation](https://jpwesselink.github.io/dotsec-rs/guide/directives.html) for details.
 
 ## Platforms
 

package/index.d.ts

@@ -13,6 +13,12 @@ export interface ParsedEntry {
 export interface ParsedValidationError {
   key: string;
   message: string;
+  severity: string;
+}
+
+export interface ParsedSchemaEntry {
+  key: string;
+  directives: DirectiveItem[];
 }
 
 /** Parse a .env file string and return entries with their directives. */
@@ -26,3 +32,24 @@ export declare function toJson(source: string): string;
 
 /** Roundtrip: parse a .env file string and serialize it back. */
 export declare function format(source: string): string;
+
+/** Validate a .env file against a schema string. Returns validation errors. */
+export declare function validateAgainstSchema(source: string, schemaSource: string): ParsedValidationError[];
+
+/** Format a .env file to match schema key ordering. */
+export declare function formatBySchema(source: string, schemaSource: string): string;
+
+/** Discover the schema file path for a given .sec file. Returns null if no schema found. */
+export declare function discoverSchema(secFilePath: string, explicitSchema?: string | undefined | null): string | null;
+
+/** Load and parse a schema file from disk. Uses discovery if no path given. Returns null if no schema found. */
+export declare function loadSchema(secFilePath?: string | undefined | null, explicitSchema?: string | undefined | null): ParsedSchemaEntry[] | null;
+
+/** Parse a schema file string and return entries with their directives. */
+export declare function parseSchema(source: string): ParsedSchemaEntry[];
+
+/** Convert a schema file to JSON Schema (draft-07). */
+export declare function schemaToJsonSchema(schemaSource: string): string;
+
+/** Generate TypeScript code from a schema file. */
+export declare function schemaToTypescript(schemaSource: string): string;

package/index.js

@@ -44,5 +44,5 @@ try {
   }
 }
 
-export const { parse, validate, toJson, format } = nativeModule;
+export const { parse, validate, toJson, format, validateAgainstSchema, formatBySchema, discoverSchema, loadSchema, parseSchema, schemaToJsonSchema, schemaToTypescript } = nativeModule;
 export default nativeModule;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dotsec/core",
-  "version": "5.0.0-feat-init-kms-validation.8b08ffb",
+  "version": "5.0.0-feat-local-encryption.bae90e1",
   "description": "Native Node.js bindings for dotsec — parse, validate, and format .env files",
   "type": "module",
   "main": "index.js",
@@ -26,12 +26,12 @@
     "url": "https://github.com/jpwesselink/dotsec-rs"
   },
   "optionalDependencies": {
-    "@dotsec/core-darwin-arm64": "5.0.0-feat-init-kms-validation.8b08ffb",
-    "@dotsec/core-darwin-x64": "5.0.0-feat-init-kms-validation.8b08ffb",
-    "@dotsec/core-linux-x64-gnu": "5.0.0-feat-init-kms-validation.8b08ffb",
-    "@dotsec/core-linux-arm64-gnu": "5.0.0-feat-init-kms-validation.8b08ffb",
-    "@dotsec/core-win32-x64-msvc": "5.0.0-feat-init-kms-validation.8b08ffb",
-    "@dotsec/core-win32-arm64-msvc": "5.0.0-feat-init-kms-validation.8b08ffb"
+    "@dotsec/core-darwin-arm64": "5.0.0-feat-local-encryption.bae90e1",
+    "@dotsec/core-darwin-x64": "5.0.0-feat-local-encryption.bae90e1",
+    "@dotsec/core-linux-x64-gnu": "5.0.0-feat-local-encryption.bae90e1",
+    "@dotsec/core-linux-arm64-gnu": "5.0.0-feat-local-encryption.bae90e1",
+    "@dotsec/core-win32-x64-msvc": "5.0.0-feat-local-encryption.bae90e1",
+    "@dotsec/core-win32-arm64-msvc": "5.0.0-feat-local-encryption.bae90e1"
   },
   "publishConfig": {
     "access": "public"