@expo/env 2.2.2-canary-20260506-03817f5 → 2.3.0

package/build/constants.d.ts

@@ -0,0 +1,13 @@
+export declare function isUnsafeAllowedEnvKey(name: string): boolean;
+export declare function isIgnoredEnvKey(name: string): boolean;
+/**
+ * Whether a dotenv key represents per-developer/per-machine configuration that
+ * should only be loaded from `.local` env files (e.g. `.env.local`,
+ * `.env.development.local`). Committed `.env*` files cannot set these — that
+ * prevents a malicious project from redirecting developer-tool roots (e.g.
+ * `ANDROID_HOME`) via a supply-chain attack, while still letting developers
+ * pin them in their gitignored `.local` overrides.
+ *
+ * Honors `EXPO_UNSAFE_DOTENV_KEYS`: opt-in keys are allowed in any env file.
+ */
+export declare function isLocalEnvKey(name: string): boolean;

package/build/constants.js

@@ -0,0 +1,274 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.isIgnoredEnvKey = isIgnoredEnvKey;
+exports.isLocalEnvKey = isLocalEnvKey;
+exports.isUnsafeAllowedEnvKey = isUnsafeAllowedEnvKey;
+function _nodeOs() {
+  const data = _interopRequireDefault(require("node:os"));
+  _nodeOs = function () {
+    return data;
+  };
+  return data;
+}
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+const platform = _nodeOs().default.platform();
+
+// WARN(@kitten): We don't read this dynamically to ignore later modifications to this env var
+const safeKeys = new Set(process.env.EXPO_UNSAFE_DOTENV_KEYS?.split(',').filter(x => !!x));
+function isUnsafeAllowedEnvKey(name) {
+  return safeKeys.has(name);
+}
+function isIgnoredEnvKey(name) {
+  if (platform === 'darwin' && name.startsWith('DYLD_')) {
+    return true;
+  } else if (platform === 'linux' && name.startsWith('LD_')) {
+    return true;
+  } else if (safeKeys.has(name)) {
+    return false;
+  }
+
+  // NOTE(@kitten): Per-developer tool roots (ANDROID_HOME, JDK_HOME, DEVELOPER_DIR,
+  // npm/pnpm/yarn/bun paths, etc) are not blocked here — see `isLocalEnvKey`, which
+  // restricts them to `.local` env files (gitignored by convention) so committed
+  // `.env*` files cannot redirect them.
+  switch (name) {
+    // NOTE: Expo internal env vars
+    case '__EXPO_ENV_LOADED':
+    case 'EXPO_NO_DOTENV':
+    case 'EXPO_UNSAFE_DOTENV_KEYS':
+      return true;
+
+    // Linux dynamic-loader, can cause inconsistent calls
+    case 'LD_PRELOAD':
+    case 'LD_LIBRARY_PATH':
+    case 'LD_AUDIT':
+      return true;
+
+    // macOS dynamic-loader, can cause inconsistent calls
+    case 'DYLD_INSERT_LIBRARIES':
+    case 'DYLD_LIBRARY_PATH':
+    case 'DYLD_FRAMEWORK_PATH':
+    case 'DYLD_FALLBACK_LIBRARY_PATH':
+    case 'DYLD_FALLBACK_FRAMEWORK_PATH':
+      return true;
+
+    // OpenSSL
+    case 'SSLKEYLOGFILE':
+      return true;
+
+    // Changes Node behaviour and shouldn't be set in dotenv
+    case 'NODE_PATH':
+    case 'NODE_OPTIONS':
+    case 'NODE_EXTRA_CA_CERTS':
+    case 'NODE_TLS_REJECT_UNAUTHORIZED':
+    case 'NODE_COMPILE_CACHE':
+    case 'NPM_CONFIG_NODE_OPTIONS':
+    case 'NODE_REPL_EXTERNAL_MODULE':
+      return true;
+
+    // Changes Bun behaviour and shouldn't be set in dotenv
+    case 'BUN_RUNTIME_TRANSPILER_CACHE_PATH':
+      return true;
+
+    // Shell startup hooks
+    case 'BASH_ENV':
+    case 'ENV':
+    case 'ZDOTDIR':
+    case 'IFS':
+    case 'CDPATH':
+    case 'PROMPT_COMMAND':
+    case 'SHELLOPTS':
+    case 'BASHOPTS':
+      return true;
+
+    // Special git/ssh/gpg args
+    case 'GIT_SSH':
+    case 'GIT_SSH_COMMAND':
+    case 'GPG_TTY':
+    case 'SSH_ASKPASS':
+    case 'GIT_ASKPASS':
+    case 'GIT_EXEC_PATH':
+      return true;
+
+    // Perl libs
+    case 'PERL5OPT':
+    case 'PERL5LIB':
+    case 'PERLLIB':
+      return true;
+
+    // Python modules
+    case 'PYTHONSTARTUP':
+    case 'PYTHONPATH':
+    case 'PYTHONHOME':
+    case 'PYTHONINSPECT':
+    case 'PYTHONUSERBASE':
+    case 'PYTHONEXECUTABLE':
+    case 'PYTHONSAFEPATH':
+    case 'PYTJONNOUSERSITE':
+      return true;
+
+    // Ruby libs
+    case 'RUBYOPT':
+    case 'RUBYLIB':
+    case 'BUNDLE_GEMFILE':
+    case 'RUBYSHELL':
+    case 'RUBYPATH':
+    case 'GEM_HOME':
+    case 'GEM_PATH':
+    case 'BUNDLE_PATH':
+      return true;
+
+    // Java vars
+    case '_JAVA_OPTIONS':
+    case 'JAVA_TOOL_OPTIONS':
+    case 'JDK_JAVA_OPTIONS':
+    case 'CLASSPATH':
+      return true;
+
+    // User env vars
+    case 'HOME':
+    case 'USERPROFILE':
+    case 'HOMEDRIVE':
+    case 'HOMEPATH':
+    case 'TMPDIR':
+    case 'TMP':
+    case 'TEMP':
+    case 'USER':
+    case 'SHELL':
+    case 'PATH':
+    case 'PATHEXT':
+    case 'LANG':
+    case 'PWD':
+    case 'OLDPWD':
+    case 'TERMINFO':
+      return true;
+
+    // Windows-owned
+    case 'SYSTEMROOT':
+    case 'SystemRoot':
+      return true;
+
+    // User tools
+    case 'EDITOR':
+    case 'VISUAL':
+    case 'PAGER':
+    case 'MANPAGER':
+      return true;
+
+    // XDG dirs
+    case 'XDG_RUNTIME_DIR':
+    case 'XDG_STATE_HOME':
+    case 'XDG_DATA_HOME':
+    case 'XDG_CONFIG_DIRS':
+    case 'XDG_CACHE_HOME':
+    case 'XDG_CONFIG_HOME':
+    case 'XDG_BIN_HOME':
+      return true;
+
+    // direnv
+    case 'DIRENV_DIR':
+    case 'DIRENV_FILE':
+    case 'DIRENV_WATCHES':
+    case 'DIRENV_DIFF':
+      return true;
+
+    // Package-manager registry/install roots. No legitimate per-project `.env`
+    // use case — the established mechanism for each is a dedicated config file
+    // (`.npmrc`, `.yarnrc.yml`, `.bunfig.toml`) — and a malicious value is a
+    // supply-chain RCE the moment the CLI shells out to npm/yarn/pnpm/bun.
+    case 'NPM_CONFIG_REGISTRY':
+    case 'NPM_CONFIG_PREFIX':
+    case 'NPM_CONFIG_USERCONFIG':
+    case 'NPM_CONFIG_GLOBALCONFIG':
+    case 'NPM_CONFIG_CACHE':
+    case 'YARN_REGISTRY':
+    case 'YARN_CACHE_FOLDER':
+    case 'YARN_GLOBAL_FOLDER':
+    case 'PNPM_HOME':
+    case 'BUN_INSTALL':
+    case 'BUN_INSTALL_BIN':
+    case 'COCOAPODS_HOME':
+    case 'CMAKE_HOME':
+      return true;
+    default:
+      return false;
+  }
+}
+
+/**
+ * Whether a dotenv key represents per-developer/per-machine configuration that
+ * should only be loaded from `.local` env files (e.g. `.env.local`,
+ * `.env.development.local`). Committed `.env*` files cannot set these — that
+ * prevents a malicious project from redirecting developer-tool roots (e.g.
+ * `ANDROID_HOME`) via a supply-chain attack, while still letting developers
+ * pin them in their gitignored `.local` overrides.
+ *
+ * Honors `EXPO_UNSAFE_DOTENV_KEYS`: opt-in keys are allowed in any env file.
+ */
+function isLocalEnvKey(name) {
+  if (safeKeys.has(name)) return false;
+  switch (name) {
+    // Android tooling
+    case 'ANDROID_HOME':
+    case 'ANDROID_SDK_ROOT':
+    case 'ANDROID_NDK_HOME':
+    case 'ANDROID_NDK_ROOT':
+    case 'ANDROID_AVD_HOME':
+    case 'ANDROID_EMULATOR_HOME':
+    case 'GRADLE_HOME':
+    case 'GRADLE_USER_HOME':
+    case 'KOTLIN_HOME':
+      return true;
+
+    // JVM tooling
+    case 'JAVA_HOME':
+    case 'JDK_HOME':
+    case 'JRE_HOME':
+      return true;
+
+    // Apple tooling
+    case 'DEVELOPER_DIR':
+    case 'XCODE_DEVELOPER_DIR_PATH':
+      return true;
+
+    // CocoaPods / Fastlane (secrets and non-exec config)
+    case 'COCOAPODS_DISABLE_STATS':
+    case 'FASTLANE_USER':
+    case 'FASTLANE_PASSWORD':
+    case 'FASTLANE_SESSION':
+    case 'FASTLANE_APPLE_APPLICATION_SPECIFIC_PASSWORD':
+      return true;
+
+    // Android NDK (per-project NDK version pinning is common)
+    case 'NDK_HOME':
+    case 'NDK_ROOT':
+      return true;
+
+    // Per-developer preferences and per-machine setup
+    case 'BROWSER':
+    case 'BROWSER_ARGS':
+    case 'HTTP_PROXY':
+    case 'http_proxy':
+    case 'HTTPS_PROXY':
+    case 'https_proxy':
+    case 'ALL_PROXY':
+    case 'all_proxy':
+    case 'NO_PROXY':
+    case 'no_proxy':
+    case 'FTP_PROXY':
+    case 'ftp_proxy':
+    case 'SSL_CRT_FILE':
+    case 'SSL_KEY_FILE':
+    case 'REACT_NATIVE_PACKAGER_HOSTNAME':
+      return true;
+    // NOTE(@kitten): Used to override where hermesc is found, not safe to read from .env
+    case 'REACT_NATIVE_OVERRIDE_HERMES_DIR':
+      return true;
+    default:
+      return false;
+  }
+}
+//# sourceMappingURL=constants.js.map

package/build/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","names":["_nodeOs","data","_interopRequireDefault","require","e","__esModule","default","platform","os","safeKeys","Set","process","env","EXPO_UNSAFE_DOTENV_KEYS","split","filter","x","isUnsafeAllowedEnvKey","name","has","isIgnoredEnvKey","startsWith","isLocalEnvKey"],"sources":["../src/constants.ts"],"sourcesContent":["import os from 'node:os';\n\nconst platform = os.platform();\n\n// WARN(@kitten): We don't read this dynamically to ignore later modifications to this env var\nconst safeKeys = new Set(process.env.EXPO_UNSAFE_DOTENV_KEYS?.split(',').filter((x) => !!x));\n\nexport function isUnsafeAllowedEnvKey(name: string): boolean {\n  return safeKeys.has(name);\n}\n\nexport function isIgnoredEnvKey(name: string) {\n  if (platform === 'darwin' && name.startsWith('DYLD_')) {\n    return true;\n  } else if (platform === 'linux' && name.startsWith('LD_')) {\n    return true;\n  } else if (safeKeys.has(name)) {\n    return false;\n  }\n\n  // NOTE(@kitten): Per-developer tool roots (ANDROID_HOME, JDK_HOME, DEVELOPER_DIR,\n  // npm/pnpm/yarn/bun paths, etc) are not blocked here — see `isLocalEnvKey`, which\n  // restricts them to `.local` env files (gitignored by convention) so committed\n  // `.env*` files cannot redirect them.\n  switch (name) {\n    // NOTE: Expo internal env vars\n    case '__EXPO_ENV_LOADED':\n    case 'EXPO_NO_DOTENV':\n    case 'EXPO_UNSAFE_DOTENV_KEYS':\n      return true;\n\n    // Linux dynamic-loader, can cause inconsistent calls\n    case 'LD_PRELOAD':\n    case 'LD_LIBRARY_PATH':\n    case 'LD_AUDIT':\n      return true;\n\n    // macOS dynamic-loader, can cause inconsistent calls\n    case 'DYLD_INSERT_LIBRARIES':\n    case 'DYLD_LIBRARY_PATH':\n    case 'DYLD_FRAMEWORK_PATH':\n    case 'DYLD_FALLBACK_LIBRARY_PATH':\n    case 'DYLD_FALLBACK_FRAMEWORK_PATH':\n      return true;\n\n    // OpenSSL\n    case 'SSLKEYLOGFILE':\n      return true;\n\n    // Changes Node behaviour and shouldn't be set in dotenv\n    case 'NODE_PATH':\n    case 'NODE_OPTIONS':\n    case 'NODE_EXTRA_CA_CERTS':\n    case 'NODE_TLS_REJECT_UNAUTHORIZED':\n    case 'NODE_COMPILE_CACHE':\n    case 'NPM_CONFIG_NODE_OPTIONS':\n    case 'NODE_REPL_EXTERNAL_MODULE':\n      return true;\n\n    // Changes Bun behaviour and shouldn't be set in dotenv\n    case 'BUN_RUNTIME_TRANSPILER_CACHE_PATH':\n      return true;\n\n    // Shell startup hooks\n    case 'BASH_ENV':\n    case 'ENV':\n    case 'ZDOTDIR':\n    case 'IFS':\n    case 'CDPATH':\n    case 'PROMPT_COMMAND':\n    case 'SHELLOPTS':\n    case 'BASHOPTS':\n      return true;\n\n    // Special git/ssh/gpg args\n    case 'GIT_SSH':\n    case 'GIT_SSH_COMMAND':\n    case 'GPG_TTY':\n    case 'SSH_ASKPASS':\n    case 'GIT_ASKPASS':\n    case 'GIT_EXEC_PATH':\n      return true;\n\n    // Perl libs\n    case 'PERL5OPT':\n    case 'PERL5LIB':\n    case 'PERLLIB':\n      return true;\n\n    // Python modules\n    case 'PYTHONSTARTUP':\n    case 'PYTHONPATH':\n    case 'PYTHONHOME':\n    case 'PYTHONINSPECT':\n    case 'PYTHONUSERBASE':\n    case 'PYTHONEXECUTABLE':\n    case 'PYTHONSAFEPATH':\n    case 'PYTJONNOUSERSITE':\n      return true;\n\n    // Ruby libs\n    case 'RUBYOPT':\n    case 'RUBYLIB':\n    case 'BUNDLE_GEMFILE':\n    case 'RUBYSHELL':\n    case 'RUBYPATH':\n    case 'GEM_HOME':\n    case 'GEM_PATH':\n    case 'BUNDLE_PATH':\n      return true;\n\n    // Java vars\n    case '_JAVA_OPTIONS':\n    case 'JAVA_TOOL_OPTIONS':\n    case 'JDK_JAVA_OPTIONS':\n    case 'CLASSPATH':\n      return true;\n\n    // User env vars\n    case 'HOME':\n    case 'USERPROFILE':\n    case 'HOMEDRIVE':\n    case 'HOMEPATH':\n    case 'TMPDIR':\n    case 'TMP':\n    case 'TEMP':\n    case 'USER':\n    case 'SHELL':\n    case 'PATH':\n    case 'PATHEXT':\n    case 'LANG':\n    case 'PWD':\n    case 'OLDPWD':\n    case 'TERMINFO':\n      return true;\n\n    // Windows-owned\n    case 'SYSTEMROOT':\n    case 'SystemRoot':\n      return true;\n\n    // User tools\n    case 'EDITOR':\n    case 'VISUAL':\n    case 'PAGER':\n    case 'MANPAGER':\n      return true;\n\n    // XDG dirs\n    case 'XDG_RUNTIME_DIR':\n    case 'XDG_STATE_HOME':\n    case 'XDG_DATA_HOME':\n    case 'XDG_CONFIG_DIRS':\n    case 'XDG_CACHE_HOME':\n    case 'XDG_CONFIG_HOME':\n    case 'XDG_BIN_HOME':\n      return true;\n\n    // direnv\n    case 'DIRENV_DIR':\n    case 'DIRENV_FILE':\n    case 'DIRENV_WATCHES':\n    case 'DIRENV_DIFF':\n      return true;\n\n    // Package-manager registry/install roots. No legitimate per-project `.env`\n    // use case — the established mechanism for each is a dedicated config file\n    // (`.npmrc`, `.yarnrc.yml`, `.bunfig.toml`) — and a malicious value is a\n    // supply-chain RCE the moment the CLI shells out to npm/yarn/pnpm/bun.\n    case 'NPM_CONFIG_REGISTRY':\n    case 'NPM_CONFIG_PREFIX':\n    case 'NPM_CONFIG_USERCONFIG':\n    case 'NPM_CONFIG_GLOBALCONFIG':\n    case 'NPM_CONFIG_CACHE':\n    case 'YARN_REGISTRY':\n    case 'YARN_CACHE_FOLDER':\n    case 'YARN_GLOBAL_FOLDER':\n    case 'PNPM_HOME':\n    case 'BUN_INSTALL':\n    case 'BUN_INSTALL_BIN':\n    case 'COCOAPODS_HOME':\n    case 'CMAKE_HOME':\n      return true;\n\n    default:\n      return false;\n  }\n}\n\n/**\n * Whether a dotenv key represents per-developer/per-machine configuration that\n * should only be loaded from `.local` env files (e.g. `.env.local`,\n * `.env.development.local`). Committed `.env*` files cannot set these — that\n * prevents a malicious project from redirecting developer-tool roots (e.g.\n * `ANDROID_HOME`) via a supply-chain attack, while still letting developers\n * pin them in their gitignored `.local` overrides.\n *\n * Honors `EXPO_UNSAFE_DOTENV_KEYS`: opt-in keys are allowed in any env file.\n */\nexport function isLocalEnvKey(name: string): boolean {\n  if (safeKeys.has(name)) return false;\n  switch (name) {\n    // Android tooling\n    case 'ANDROID_HOME':\n    case 'ANDROID_SDK_ROOT':\n    case 'ANDROID_NDK_HOME':\n    case 'ANDROID_NDK_ROOT':\n    case 'ANDROID_AVD_HOME':\n    case 'ANDROID_EMULATOR_HOME':\n    case 'GRADLE_HOME':\n    case 'GRADLE_USER_HOME':\n    case 'KOTLIN_HOME':\n      return true;\n\n    // JVM tooling\n    case 'JAVA_HOME':\n    case 'JDK_HOME':\n    case 'JRE_HOME':\n      return true;\n\n    // Apple tooling\n    case 'DEVELOPER_DIR':\n    case 'XCODE_DEVELOPER_DIR_PATH':\n      return true;\n\n    // CocoaPods / Fastlane (secrets and non-exec config)\n    case 'COCOAPODS_DISABLE_STATS':\n    case 'FASTLANE_USER':\n    case 'FASTLANE_PASSWORD':\n    case 'FASTLANE_SESSION':\n    case 'FASTLANE_APPLE_APPLICATION_SPECIFIC_PASSWORD':\n      return true;\n\n    // Android NDK (per-project NDK version pinning is common)\n    case 'NDK_HOME':\n    case 'NDK_ROOT':\n      return true;\n\n    // Per-developer preferences and per-machine setup\n    case 'BROWSER':\n    case 'BROWSER_ARGS':\n    case 'HTTP_PROXY':\n    case 'http_proxy':\n    case 'HTTPS_PROXY':\n    case 'https_proxy':\n    case 'ALL_PROXY':\n    case 'all_proxy':\n    case 'NO_PROXY':\n    case 'no_proxy':\n    case 'FTP_PROXY':\n    case 'ftp_proxy':\n    case 'SSL_CRT_FILE':\n    case 'SSL_KEY_FILE':\n    case 'REACT_NATIVE_PACKAGER_HOSTNAME':\n      return true;\n    // NOTE(@kitten): Used to override where hermesc is found, not safe to read from .env\n    case 'REACT_NATIVE_OVERRIDE_HERMES_DIR':\n      return true;\n\n    default:\n      return false;\n  }\n}\n"],"mappings":";;;;;;;;AAAA,SAAAA,QAAA;EAAA,MAAAC,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAH,OAAA,YAAAA,CAAA;IAAA,OAAAC,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AAAyB,SAAAC,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEzB,MAAMG,QAAQ,GAAGC,iBAAE,CAACD,QAAQ,CAAC,CAAC;;AAE9B;AACA,MAAME,QAAQ,GAAG,IAAIC,GAAG,CAACC,OAAO,CAACC,GAAG,CAACC,uBAAuB,EAAEC,KAAK,CAAC,GAAG,CAAC,CAACC,MAAM,CAAEC,CAAC,IAAK,CAAC,CAACA,CAAC,CAAC,CAAC;AAErF,SAASC,qBAAqBA,CAACC,IAAY,EAAW;EAC3D,OAAOT,QAAQ,CAACU,GAAG,CAACD,IAAI,CAAC;AAC3B;AAEO,SAASE,eAAeA,CAACF,IAAY,EAAE;EAC5C,IAAIX,QAAQ,KAAK,QAAQ,IAAIW,IAAI,CAACG,UAAU,CAAC,OAAO,CAAC,EAAE;IACrD,OAAO,IAAI;EACb,CAAC,MAAM,IAAId,QAAQ,KAAK,OAAO,IAAIW,IAAI,CAACG,UAAU,CAAC,KAAK,CAAC,EAAE;IACzD,OAAO,IAAI;EACb,CAAC,MAAM,IAAIZ,QAAQ,CAACU,GAAG,CAACD,IAAI,CAAC,EAAE;IAC7B,OAAO,KAAK;EACd;;EAEA;EACA;EACA;EACA;EACA,QAAQA,IAAI;IACV;IACA,KAAK,mBAAmB;IACxB,KAAK,gBAAgB;IACrB,KAAK,yBAAyB;MAC5B,OAAO,IAAI;;IAEb;IACA,KAAK,YAAY;IACjB,KAAK,iBAAiB;IACtB,KAAK,UAAU;MACb,OAAO,IAAI;;IAEb;IACA,KAAK,uBAAuB;IAC5B,KAAK,mBAAmB;IACxB,KAAK,qBAAqB;IAC1B,KAAK,4BAA4B;IACjC,KAAK,8BAA8B;MACjC,OAAO,IAAI;;IAEb;IACA,KAAK,eAAe;MAClB,OAAO,IAAI;;IAEb;IACA,KAAK,WAAW;IAChB,KAAK,cAAc;IACnB,KAAK,qBAAqB;IAC1B,KAAK,8BAA8B;IACnC,KAAK,oBAAoB;IACzB,KAAK,yBAAyB;IAC9B,KAAK,2BAA2B;MAC9B,OAAO,IAAI;;IAEb;IACA,KAAK,mCAAmC;MACtC,OAAO,IAAI;;IAEb;IACA,KAAK,UAAU;IACf,KAAK,KAAK;IACV,KAAK,SAAS;IACd,KAAK,KAAK;IACV,KAAK,QAAQ;IACb,KAAK,gBAAgB;IACrB,KAAK,WAAW;IAChB,KAAK,UAAU;MACb,OAAO,IAAI;;IAEb;IACA,KAAK,SAAS;IACd,KAAK,iBAAiB;IACtB,KAAK,SAAS;IACd,KAAK,aAAa;IAClB,KAAK,aAAa;IAClB,KAAK,eAAe;MAClB,OAAO,IAAI;;IAEb;IACA,KAAK,UAAU;IACf,KAAK,UAAU;IACf,KAAK,SAAS;MACZ,OAAO,IAAI;;IAEb;IACA,KAAK,eAAe;IACpB,KAAK,YAAY;IACjB,KAAK,YAAY;IACjB,KAAK,eAAe;IACpB,KAAK,gBAAgB;IACrB,KAAK,kBAAkB;IACvB,KAAK,gBAAgB;IACrB,KAAK,kBAAkB;MACrB,OAAO,IAAI;;IAEb;IACA,KAAK,SAAS;IACd,KAAK,SAAS;IACd,KAAK,gBAAgB;IACrB,KAAK,WAAW;IAChB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,KAAK,UAAU;IACf,KAAK,aAAa;MAChB,OAAO,IAAI;;IAEb;IACA,KAAK,eAAe;IACpB,KAAK,mBAAmB;IACxB,KAAK,kBAAkB;IACvB,KAAK,WAAW;MACd,OAAO,IAAI;;IAEb;IACA,KAAK,MAAM;IACX,KAAK,aAAa;IAClB,KAAK,WAAW;IAChB,KAAK,UAAU;IACf,KAAK,QAAQ;IACb,KAAK,KAAK;IACV,KAAK,MAAM;IACX,KAAK,MAAM;IACX,KAAK,OAAO;IACZ,KAAK,MAAM;IACX,KAAK,SAAS;IACd,KAAK,MAAM;IACX,KAAK,KAAK;IACV,KAAK,QAAQ;IACb,KAAK,UAAU;MACb,OAAO,IAAI;;IAEb;IACA,KAAK,YAAY;IACjB,KAAK,YAAY;MACf,OAAO,IAAI;;IAEb;IACA,KAAK,QAAQ;IACb,KAAK,QAAQ;IACb,KAAK,OAAO;IACZ,KAAK,UAAU;MACb,OAAO,IAAI;;IAEb;IACA,KAAK,iBAAiB;IACtB,KAAK,gBAAgB;IACrB,KAAK,eAAe;IACpB,KAAK,iBAAiB;IACtB,KAAK,gBAAgB;IACrB,KAAK,iBAAiB;IACtB,KAAK,cAAc;MACjB,OAAO,IAAI;;IAEb;IACA,KAAK,YAAY;IACjB,KAAK,aAAa;IAClB,KAAK,gBAAgB;IACrB,KAAK,aAAa;MAChB,OAAO,IAAI;;IAEb;IACA;IACA;IACA;IACA,KAAK,qBAAqB;IAC1B,KAAK,mBAAmB;IACxB,KAAK,uBAAuB;IAC5B,KAAK,yBAAyB;IAC9B,KAAK,kBAAkB;IACvB,KAAK,eAAe;IACpB,KAAK,mBAAmB;IACxB,KAAK,oBAAoB;IACzB,KAAK,WAAW;IAChB,KAAK,aAAa;IAClB,KAAK,iBAAiB;IACtB,KAAK,gBAAgB;IACrB,KAAK,YAAY;MACf,OAAO,IAAI;IAEb;MACE,OAAO,KAAK;EAChB;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASI,aAAaA,CAACJ,IAAY,EAAW;EACnD,IAAIT,QAAQ,CAACU,GAAG,CAACD,IAAI,CAAC,EAAE,OAAO,KAAK;EACpC,QAAQA,IAAI;IACV;IACA,KAAK,cAAc;IACnB,KAAK,kBAAkB;IACvB,KAAK,kBAAkB;IACvB,KAAK,kBAAkB;IACvB,KAAK,kBAAkB;IACvB,KAAK,uBAAuB;IAC5B,KAAK,aAAa;IAClB,KAAK,kBAAkB;IACvB,KAAK,aAAa;MAChB,OAAO,IAAI;;IAEb;IACA,KAAK,WAAW;IAChB,KAAK,UAAU;IACf,KAAK,UAAU;MACb,OAAO,IAAI;;IAEb;IACA,KAAK,eAAe;IACpB,KAAK,0BAA0B;MAC7B,OAAO,IAAI;;IAEb;IACA,KAAK,yBAAyB;IAC9B,KAAK,eAAe;IACpB,KAAK,mBAAmB;IACxB,KAAK,kBAAkB;IACvB,KAAK,8CAA8C;MACjD,OAAO,IAAI;;IAEb;IACA,KAAK,UAAU;IACf,KAAK,UAAU;MACb,OAAO,IAAI;;IAEb;IACA,KAAK,SAAS;IACd,KAAK,cAAc;IACnB,KAAK,YAAY;IACjB,KAAK,YAAY;IACjB,KAAK,aAAa;IAClB,KAAK,aAAa;IAClB,KAAK,WAAW;IAChB,KAAK,WAAW;IAChB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,KAAK,WAAW;IAChB,KAAK,WAAW;IAChB,KAAK,cAAc;IACnB,KAAK,cAAc;IACnB,KAAK,gCAAgC;MACnC,OAAO,IAAI;IACb;IACA,KAAK,kCAAkC;MACrC,OAAO,IAAI;IAEb;MACE,OAAO,KAAK;EAChB;AACF","ignoreList":[]}

package/build/index.d.ts

@@ -27,6 +27,7 @@ export declare function parseEnvFiles(envFiles: string[], { systemEnv, }?: {
 }): {
     env: EnvOutput;
     files: string[];
+    sensitiveLoadedKeys: string[];
 };
 /**
  * Parse all environment variables using the list of `.env*` files, and mutate the system environment with these variables.
@@ -46,6 +47,7 @@ export declare function loadEnvFiles(envFiles: string[], { force, silent, system
     loaded: string[];
     env: EnvOutput;
     files: string[];
+    sensitiveLoadedKeys: string[];
     result: "loaded";
 };
 /**
@@ -55,6 +57,7 @@ export declare function loadEnvFiles(envFiles: string[], { force, silent, system
 export declare function parseProjectEnv(projectRoot: string, options?: Parameters<typeof getEnvFiles>[0] & Parameters<typeof parseEnvFiles>[1]): {
     env: EnvOutput;
     files: string[];
+    sensitiveLoadedKeys: string[];
 };
 /**
  * Parse all environment variables using the detected list of `.env*` files from a project.
@@ -69,8 +72,36 @@ export declare function loadProjectEnv(projectRoot: string, options?: Parameters
     loaded: string[];
     env: EnvOutput;
     files: string[];
+    sensitiveLoadedKeys: string[];
     result: "loaded";
 };
+/**
+ * Get a fresh clone of the system environment with all `@expo/env`-applied
+ * mutations reverted to their pre-load values. The result is intended to be
+ * passed as the `env` option of `child_process.spawn` / `@expo/spawn-async`
+ * when a subprocess should observe the environment as it was before any
+ * `.env*` files were loaded — for example, when resolving SDK tooling paths
+ * that should not be influenced by project-controlled `.env` values.
+ *
+ * Allocates lazily: nothing is held until this function is called, and each
+ * call returns a new object so callers may mutate it freely.
+ *
+ * @param systemEnv The env to revert against; defaults to `process.env`.
+ */
+export declare function getOriginalEnv(systemEnv?: EnvOutput): EnvOutput;
+/**
+ * Get the pre-load value of a single environment variable as recorded by
+ * `@expo/env`. Falls through to the value in `systemEnv` for keys that
+ * `@expo/env` never touched. O(1) and allocation-free, intended for read-sites
+ * that resolve filesystem paths or executables from a single env var.
+ *
+ * Honors `EXPO_UNSAFE_DOTENV_KEYS`: keys the caller has explicitly opted into
+ * via the escape hatch return their currently loaded value, not the original.
+ *
+ * @param key The environment variable to read.
+ * @param systemEnv The env to read against; defaults to `process.env`.
+ */
+export declare function getOriginalEnvValue(key: string, systemEnv?: EnvOutput): string | undefined;
 /** Log the loaded environment info from the loaded results */
 export declare function logLoadedEnv(envInfo: ReturnType<typeof loadEnvFiles>, options?: Parameters<typeof loadEnvFiles>[1]): {
     result: "skipped";
@@ -79,6 +110,7 @@ export declare function logLoadedEnv(envInfo: ReturnType<typeof loadEnvFiles>, o
     loaded: string[];
     env: EnvOutput;
     files: string[];
+    sensitiveLoadedKeys: string[];
     result: "loaded";
 };
 /**
@@ -93,6 +125,7 @@ export declare function get(projectRoot: string, { force, silent, }?: {
 }): {
     env: EnvOutput;
     files: string[];
+    sensitiveLoadedKeys: string[];
 };
 /**
  * Load environment variables from .env files and mutate the current `process.env` with the results.

package/build/index.js

@@ -7,6 +7,8 @@ exports.LOADED_ENV_NAME = exports.KNOWN_MODES = void 0;
 exports.get = get;
 exports.getEnvFiles = getEnvFiles;
 exports.getFiles = getFiles;
+exports.getOriginalEnv = getOriginalEnv;
+exports.getOriginalEnvValue = getOriginalEnvValue;
 exports.isEnabled = isEnabled;
 exports.load = load;
 exports.loadEnvFiles = loadEnvFiles;
@@ -50,6 +52,13 @@ function _nodePath() {
   };
   return data;
 }
+function _constants() {
+  const data = require("./constants");
+  _constants = function () {
+    return data;
+  };
+  return data;
+}
 function _parse() {
   const data = require("./parse");
   _parse = function () {
@@ -59,6 +68,20 @@ function _parse() {
 }
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 const debug = require('debug')('expo:env');
+const ORIGINAL_ENV_BACKUP_KEY = Symbol.for('@expo/env.originalEnvBackup.v1');
+const globalStore = globalThis;
+const originalEnvBackup = globalStore[ORIGINAL_ENV_BACKUP_KEY] ?? (globalStore[ORIGINAL_ENV_BACKUP_KEY] = new WeakMap());
+function rememberOriginal(systemEnv, key) {
+  if ((0, _constants().isUnsafeAllowedEnvKey)(key)) return;
+  let backup = originalEnvBackup.get(systemEnv);
+  if (!backup) {
+    backup = new Map();
+    originalEnvBackup.set(systemEnv, backup);
+  }
+  if (!backup.has(key)) {
+    backup.set(key, systemEnv[key]);
+  }
+}
 
 /** Determine if the `.env` files are enabled or not, through `EXPO_NO_DOTENV` */
 function isEnabled() {
@@ -114,7 +137,8 @@ function parseEnvFiles(envFiles, {
     debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);
     return {
       env: {},
-      files: []
+      files: [],
+      sensitiveLoadedKeys: []
     };
   }
 
@@ -126,6 +150,9 @@ function parseEnvFiles(envFiles, {
   // https://github.com/motdotla/dotenv-expand
   const loadedEnvVars = {};
   const loadedEnvFiles = [];
+  const blockedByFile = {};
+  const localOnlyByFile = {};
+  const sensitive = new Set();
 
   // Iterate over each dotenv file in lowest prio to highest prio order.
   // This step won't write to the process.env, but will overwrite the parsed envs.
@@ -133,9 +160,23 @@ function parseEnvFiles(envFiles, {
     try {
       const envFileContent = _nodeFs().default.readFileSync(envFile, 'utf8');
       const envFileParsed = (0, _parse().parse)(envFileContent);
+      const isLocalFile = _nodePath().default.basename(envFile).endsWith('.local');
       loadedEnvFiles.push(envFile);
       debug(`Loaded environment variables from: ${envFile}`);
       for (const key of Object.keys(envFileParsed)) {
+        if ((0, _constants().isIgnoredEnvKey)(key)) {
+          (blockedByFile[envFile] ||= []).push(key);
+          debug(`"${key}" is blocked from dotenv files, skipping in: ${envFile}`);
+          continue;
+        }
+        if (!isLocalFile && (0, _constants().isLocalEnvKey)(key)) {
+          (localOnlyByFile[envFile] ||= []).push(key);
+          debug(`"${key}" is only allowed in .local env files, skipping in: ${envFile}`);
+          continue;
+        }
+        if (isLocalFile && (0, _constants().isLocalEnvKey)(key)) {
+          sensitive.add(key);
+        }
         if (typeof loadedEnvVars[key] !== 'undefined') {
           debug(`"${key}" is already defined and overwritten by: ${envFile}`);
         }
@@ -154,11 +195,35 @@ function parseEnvFiles(envFiles, {
       throw error;
     }
   });
+  const violations = [];
+  if (Object.keys(blockedByFile).length > 0) {
+    violations.push(formatBlockedViolation(blockedByFile));
+  }
+  if (Object.keys(localOnlyByFile).length > 0) {
+    violations.push(formatLocalOnlyViolation(localOnlyByFile));
+  }
+  if (violations.length > 0) {
+    throw new Error(violations.join('\n\n'));
+  }
+  const env = (0, _parse().expand)(loadedEnvVars, systemEnv);
+  for (const key in env) {
+    rememberOriginal(systemEnv, key);
+  }
   return {
-    env: (0, _parse().expand)(loadedEnvVars, systemEnv),
-    files: loadedEnvFiles.reverse()
+    env,
+    files: loadedEnvFiles.reverse(),
+    sensitiveLoadedKeys: [...sensitive]
   };
 }
+function formatViolationFiles(byFile) {
+  return Object.entries(byFile).map(([file, keys]) => `  ${_nodePath().default.basename(file)}: ${keys.join(', ')}`).join('\n');
+}
+function formatBlockedViolation(byFile) {
+  return ['Refused to load dangerous environment variables from .env files.', 'Opt in via EXPO_UNSAFE_DOTENV_KEYS in your shell environment if you truly need them.', '', formatViolationFiles(byFile)].join('\n');
+}
+function formatLocalOnlyViolation(byFile) {
+  return ['Refused to load personal environment variables from a non-.local env file.', 'Move them to a .local env file.', '', formatViolationFiles(byFile)].join('\n');
+}
 
 /**
  * Parse all environment variables using the list of `.env*` files, and mutate the system environment with these variables.
@@ -185,12 +250,14 @@ function loadEnvFiles(envFiles, {
     if (typeof systemEnv[key] !== 'undefined') {
       debug(`"${key}" is already defined and IS NOT overwritten`);
     } else {
+      rememberOriginal(systemEnv, key);
       systemEnv[key] = parsed.env[key];
       loadedEnvKeys.push(key);
     }
   }
 
   // Mark the environment as loaded
+  rememberOriginal(systemEnv, LOADED_ENV_NAME);
   systemEnv[LOADED_ENV_NAME] = JSON.stringify(loadedEnvKeys);
   return {
     result: 'loaded',
@@ -217,6 +284,56 @@ function loadProjectEnv(projectRoot, options) {
   return loadEnvFiles(getEnvFiles(options).map(envFile => _nodePath().default.join(projectRoot, envFile)), options);
 }
 
+/**
+ * Get a fresh clone of the system environment with all `@expo/env`-applied
+ * mutations reverted to their pre-load values. The result is intended to be
+ * passed as the `env` option of `child_process.spawn` / `@expo/spawn-async`
+ * when a subprocess should observe the environment as it was before any
+ * `.env*` files were loaded — for example, when resolving SDK tooling paths
+ * that should not be influenced by project-controlled `.env` values.
+ *
+ * Allocates lazily: nothing is held until this function is called, and each
+ * call returns a new object so callers may mutate it freely.
+ *
+ * @param systemEnv The env to revert against; defaults to `process.env`.
+ */
+function getOriginalEnv(systemEnv = process.env) {
+  const result = {
+    ...systemEnv
+  };
+  const backup = originalEnvBackup.get(systemEnv);
+  if (backup) {
+    for (const [key, original] of backup) {
+      if (original === undefined) {
+        delete result[key];
+      } else {
+        result[key] = original;
+      }
+    }
+  }
+  return result;
+}
+
+/**
+ * Get the pre-load value of a single environment variable as recorded by
+ * `@expo/env`. Falls through to the value in `systemEnv` for keys that
+ * `@expo/env` never touched. O(1) and allocation-free, intended for read-sites
+ * that resolve filesystem paths or executables from a single env var.
+ *
+ * Honors `EXPO_UNSAFE_DOTENV_KEYS`: keys the caller has explicitly opted into
+ * via the escape hatch return their currently loaded value, not the original.
+ *
+ * @param key The environment variable to read.
+ * @param systemEnv The env to read against; defaults to `process.env`.
+ */
+function getOriginalEnvValue(key, systemEnv = process.env) {
+  const backup = originalEnvBackup.get(systemEnv);
+  if (backup && backup.has(key)) {
+    return backup.get(key);
+  }
+  return systemEnv[key];
+}
+
 /** Log the loaded environment info from the loaded results */
 function logLoadedEnv(envInfo, options = {}) {
   // Skip when running in force mode, or no environment variables are loaded
@@ -229,6 +346,13 @@ function logLoadedEnv(envInfo, options = {}) {
 
   // Log the loaded environment variables
   _nodeConsole().default.log(_chalk().default.gray('env: export', envInfo.loaded.join(' ')));
+
+  // Highlight developer-tool roots / secrets that were loaded from a .local file —
+  // the same keys would be refused from any non-.local file. Surfacing them here
+  // tells the user which "sensitive" values are influencing the build.
+  if (envInfo.result === 'loaded' && envInfo.sensitiveLoadedKeys?.length) {
+    _nodeConsole().default.log(_chalk().default.yellow('env: export (sensitive)', envInfo.sensitiveLoadedKeys.join(' ')));
+  }
   return envInfo;
 }
 
@@ -250,7 +374,8 @@ function get(projectRoot, {
     debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);
     return {
       env: {},
-      files: []
+      files: [],
+      sensitiveLoadedKeys: []
     };
   }
   if (force || !memo) {
@@ -278,6 +403,7 @@ function load(projectRoot, options = {}) {
       debug(`"${key}" is already defined and IS NOT overwritten`);
     } else {
       // Avoid creating a new object, mutate it instead as this causes problems in Bun
+      rememberOriginal(process.env, key);
       process.env[key] = envInfo.env[key];
       loadedEnvKeys.push(key);
     }
@@ -318,6 +444,11 @@ function getFiles(mode, {
 function parseEnv(contents, sourceEnv) {
   try {
     const env = (0, _parse().parse)(contents);
+    for (const key in env) {
+      if ((0, _constants().isIgnoredEnvKey)(key)) {
+        delete env[key];
+      }
+    }
     return (0, _parse().expand)(env, sourceEnv || {});
   } catch {
     return {};

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_chalk","data","_interopRequireDefault","require","_getenv","_nodeConsole","_nodeFs","_nodePath","_parse","e","__esModule","default","debug","isEnabled","boolish","KNOWN_MODES","exports","LOADED_ENV_NAME","getEnvFiles","mode","process","env","NODE_ENV","silent","logError","console","error","logWarning","warn","includes","filter","Boolean","parseEnvFiles","envFiles","systemEnv","files","loadedEnvVars","loadedEnvFiles","reverse","forEach","envFile","envFileContent","fs","readFileSync","envFileParsed","parse","push","key","Object","keys","code","expand","loadEnvFiles","force","result","loaded","JSON","parsed","loadedEnvKeys","stringify","parseProjectEnv","projectRoot","options","map","path","join","loadProjectEnv","logLoadedEnv","envInfo","length","log","chalk","gray","file","basename","memo","get","load","getFiles","parseEnv","contents","sourceEnv"],"sources":["../src/index.ts"],"sourcesContent":["import chalk from 'chalk';\nimport { boolish } from 'getenv';\nimport console from 'node:console';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { parse, expand, type EnvOutput } from './parse';\n\nconst debug = require('debug')('expo:env') as typeof console.log;\n\n/** Determine if the `.env` files are enabled or not, through `EXPO_NO_DOTENV` */\nexport function isEnabled() {\n  return !boolish('EXPO_NO_DOTENV', false);\n}\n\n/** All conventional modes that should not cause warnings */\nexport const KNOWN_MODES = ['development', 'test', 'production'];\n\n/** The environment variable name to use when marking the environment as loaded */\nexport const LOADED_ENV_NAME = '__EXPO_ENV_LOADED';\n\n/**\n * Get a list of all `.env*` files based on the `NODE_ENV` mode.\n * This returns a list of files, in order of highest priority to lowest priority.\n *\n * @see https://github.com/bkeepers/dotenv/tree/v3.1.4#customizing-rails\n */\nexport function getEnvFiles({\n  mode = process.env.NODE_ENV,\n  silent,\n}: {\n  /** The mode to use when creating the list of `.env*` files, defaults to `NODE_ENV` */\n  mode?: string;\n  /** If possible misconfiguration warnings should be logged, or only logged as debug log */\n  silent?: boolean;\n} = {}) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return [];\n  }\n\n  const logError = silent ? debug : console.error;\n  const logWarning = silent ? debug : console.warn;\n\n  if (!mode) {\n    logError(\n      `The NODE_ENV environment variable is required but was not specified. Ensure the project is bundled with Expo CLI or NODE_ENV is set. Using only .env.local and .env`\n    );\n    return ['.env.local', '.env'];\n  }\n\n  if (!KNOWN_MODES.includes(mode)) {\n    logWarning(\n      `NODE_ENV=\"${mode}\" is non-conventional and might cause development code to run in production. Use \"development\", \"test\", or \"production\" instead. Continuing with non-conventional mode`\n    );\n  }\n\n  // see: https://github.com/bkeepers/dotenv/tree/v3.1.4#customizing-rails\n  return [\n    `.env.${mode}.local`,\n    // Don't include `.env.local` for `test` environment\n    // since normally you expect tests to produce the same\n    // results for everyone\n    mode !== 'test' && `.env.local`,\n    `.env.${mode}`,\n    `.env`,\n  ].filter(Boolean) as string[];\n}\n\n/**\n * Parse all environment variables using the list of `.env*` files, in order of higest priority to lowest priority.\n * This does not check for collisions of existing system environment variables, or mutates the system environment variables.\n */\nexport function parseEnvFiles(\n  envFiles: string[],\n  {\n    systemEnv = process.env,\n  }: {\n    /** The system environment to use when expanding environment variables, defaults to `process.env` */\n    systemEnv?: EnvOutput;\n  } = {}\n) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return { env: {}, files: [] };\n  }\n\n  // Load environment variables from .env* files. Suppress warnings using silent\n  // if this file is missing. Dotenv will only parse the environment variables,\n  // `@expo/env` will set the resulting variables to the current process.\n  // Variable expansion is supported in .env files, and executed as final step.\n  // https://github.com/motdotla/dotenv\n  // https://github.com/motdotla/dotenv-expand\n  const loadedEnvVars: EnvOutput = {};\n  const loadedEnvFiles: string[] = [];\n\n  // Iterate over each dotenv file in lowest prio to highest prio order.\n  // This step won't write to the process.env, but will overwrite the parsed envs.\n  [...envFiles].reverse().forEach((envFile) => {\n    try {\n      const envFileContent = fs.readFileSync(envFile, 'utf8');\n      const envFileParsed = parse(envFileContent);\n\n      loadedEnvFiles.push(envFile);\n      debug(`Loaded environment variables from: ${envFile}`);\n\n      for (const key of Object.keys(envFileParsed)) {\n        if (typeof loadedEnvVars[key] !== 'undefined') {\n          debug(`\"${key}\" is already defined and overwritten by: ${envFile}`);\n        }\n\n        loadedEnvVars[key] = envFileParsed[key];\n      }\n    } catch (error: any) {\n      if ('code' in error && error.code === 'ENOENT') {\n        return debug(`${envFile} does not exist, skipping this env file`);\n      }\n      if ('code' in error && error.code === 'EISDIR') {\n        return debug(`${envFile} is a directory, skipping this env file`);\n      }\n      if ('code' in error && error.code === 'EACCES') {\n        return debug(`No permission to read ${envFile}, skipping this env file`);\n      }\n\n      throw error;\n    }\n  });\n\n  return {\n    env: expand(loadedEnvVars, systemEnv),\n    files: loadedEnvFiles.reverse(),\n  };\n}\n\n/**\n * Parse all environment variables using the list of `.env*` files, and mutate the system environment with these variables.\n * This won't override existing environment variables defined in the system environment.\n * Once the mutations are done, this will also set a propert `__EXPO_ENV=true` on the system env to avoid multiple mutations.\n * This check can be disabled through `{ force: true }`.\n */\nexport function loadEnvFiles(\n  envFiles: string[],\n  {\n    force,\n    silent = false,\n    systemEnv = process.env,\n  }: Parameters<typeof parseEnvFiles>[1] & {\n    /** If the environment variables should be applied to the system environment, regardless of previous mutations */\n    force?: boolean;\n    /** If possible misconfiguration warnings should be logged, or only logged as debug log */\n    silent?: boolean;\n  } = {}\n) {\n  if (!force && systemEnv[LOADED_ENV_NAME]) {\n    return { result: 'skipped' as const, loaded: JSON.parse(systemEnv[LOADED_ENV_NAME]) };\n  }\n\n  const parsed = parseEnvFiles(envFiles, { systemEnv });\n  const loadedEnvKeys: string[] = [];\n\n  for (const key in parsed.env) {\n    if (typeof systemEnv[key] !== 'undefined') {\n      debug(`\"${key}\" is already defined and IS NOT overwritten`);\n    } else {\n      systemEnv[key] = parsed.env[key];\n      loadedEnvKeys.push(key);\n    }\n  }\n\n  // Mark the environment as loaded\n  systemEnv[LOADED_ENV_NAME] = JSON.stringify(loadedEnvKeys);\n\n  return { result: 'loaded' as const, ...parsed, loaded: loadedEnvKeys };\n}\n\n/**\n * Parse all environment variables using the detected list of `.env*` files from a project.\n * This does not check for collisions of existing system environment variables, or mutates the system environment variables.\n */\nexport function parseProjectEnv(\n  projectRoot: string,\n  options?: Parameters<typeof getEnvFiles>[0] & Parameters<typeof parseEnvFiles>[1]\n) {\n  return parseEnvFiles(\n    getEnvFiles(options).map((envFile) => path.join(projectRoot, envFile)),\n    options\n  );\n}\n\n/**\n * Parse all environment variables using the detected list of `.env*` files from a project.\n * This won't override existing environment variables defined in the system environment.\n * Once the mutations are done, this will also set a propert `__EXPO_ENV=true` on the system env to avoid multiple mutations.\n * This check can be disabled through `{ force: true }`.\n */\nexport function loadProjectEnv(\n  projectRoot: string,\n  options?: Parameters<typeof getEnvFiles>[0] & Parameters<typeof loadEnvFiles>[1]\n) {\n  return loadEnvFiles(\n    getEnvFiles(options).map((envFile) => path.join(projectRoot, envFile)),\n    options\n  );\n}\n\n/** Log the loaded environment info from the loaded results */\nexport function logLoadedEnv(\n  envInfo: ReturnType<typeof loadEnvFiles>,\n  options: Parameters<typeof loadEnvFiles>[1] = {}\n) {\n  // Skip when running in force mode, or no environment variables are loaded\n  if (options.force || options.silent || !envInfo.loaded.length) return envInfo;\n\n  // Log the loaded environment files, when not skipped\n  if (envInfo.result === 'loaded') {\n    console.log(\n      chalk.gray('env: load', envInfo.files.map((file) => path.basename(file)).join(' '))\n    );\n  }\n\n  // Log the loaded environment variables\n  console.log(chalk.gray('env: export', envInfo.loaded.join(' ')));\n\n  return envInfo;\n}\n\n// Legacy API - for backwards compatibility\n\nlet memo: ReturnType<typeof parseEnvFiles> | null = null;\n\n/**\n * Get the environment variables without mutating the environment.\n * This returns memoized values unless the `force` property is provided.\n *\n * @deprecated use {@link parseProjectEnv} instead\n */\nexport function get(\n  projectRoot: string,\n  {\n    force,\n    silent,\n  }: {\n    force?: boolean;\n    silent?: boolean;\n  } = {}\n) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return { env: {}, files: [] };\n  }\n  if (force || !memo) {\n    memo = parseProjectEnv(projectRoot, { silent });\n  }\n  return memo;\n}\n\n/**\n * Load environment variables from .env files and mutate the current `process.env` with the results.\n *\n * @deprecated use {@link loadProjectEnv} instead\n */\nexport function load(\n  projectRoot: string,\n  options: {\n    force?: boolean;\n    silent?: boolean;\n  } = {}\n) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return process.env;\n  }\n\n  const envInfo = get(projectRoot, options);\n  const loadedEnvKeys: string[] = [];\n\n  for (const key in envInfo.env) {\n    if (typeof process.env[key] !== 'undefined') {\n      debug(`\"${key}\" is already defined and IS NOT overwritten`);\n    } else {\n      // Avoid creating a new object, mutate it instead as this causes problems in Bun\n      process.env[key] = envInfo.env[key];\n      loadedEnvKeys.push(key);\n    }\n  }\n\n  // Port the result of `get` to the newer result object\n  logLoadedEnv({ ...envInfo, result: 'loaded', loaded: loadedEnvKeys }, options);\n\n  return process.env;\n}\n\n/**\n * Get a list of all `.env*` files based on the `NODE_ENV` mode.\n * This returns a list of files, in order of highest priority to lowest priority.\n *\n * @deprecated use {@link getEnvFiles} instead\n * @see https://github.com/bkeepers/dotenv/tree/v3.1.4#customizing-rails\n */\nexport function getFiles(mode: string | undefined, { silent = false }: { silent?: boolean } = {}) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return [];\n  }\n\n  return getEnvFiles({ mode, silent });\n}\n\n/**\n * Parses the contents of a single `.env` file, optionally expanding it immediately.\n */\nexport function parseEnv(contents: string, sourceEnv?: EnvOutput): EnvOutput {\n  try {\n    const env = parse(contents);\n    return expand(env, sourceEnv || {});\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA,SAAAA,OAAA;EAAA,MAAAC,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAH,MAAA,YAAAA,CAAA;IAAA,OAAAC,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAG,QAAA;EAAA,MAAAH,IAAA,GAAAE,OAAA;EAAAC,OAAA,YAAAA,CAAA;IAAA,OAAAH,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAI,aAAA;EAAA,MAAAJ,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAE,YAAA,YAAAA,CAAA;IAAA,OAAAJ,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAK,QAAA;EAAA,MAAAL,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAG,OAAA,YAAAA,CAAA;IAAA,OAAAL,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAM,UAAA;EAAA,MAAAN,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAI,SAAA,YAAAA,CAAA;IAAA,OAAAN,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AAEA,SAAAO,OAAA;EAAA,MAAAP,IAAA,GAAAE,OAAA;EAAAK,MAAA,YAAAA,CAAA;IAAA,OAAAP,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AAAwD,SAAAC,uBAAAO,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAExD,MAAMG,KAAK,GAAGT,OAAO,CAAC,OAAO,CAAC,CAAC,UAAU,CAAuB;;AAEhE;AACO,SAASU,SAASA,CAAA,EAAG;EAC1B,OAAO,CAAC,IAAAC,iBAAO,EAAC,gBAAgB,EAAE,KAAK,CAAC;AAC1C;;AAEA;AACO,MAAMC,WAAW,GAAAC,OAAA,CAAAD,WAAA,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC;;AAEhE;AACO,MAAME,eAAe,GAAAD,OAAA,CAAAC,eAAA,GAAG,mBAAmB;;AAElD;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,WAAWA,CAAC;EAC1BC,IAAI,GAAGC,OAAO,CAACC,GAAG,CAACC,QAAQ;EAC3BC;AAMF,CAAC,GAAG,CAAC,CAAC,EAAE;EACN,IAAI,CAACV,SAAS,CAAC,CAAC,EAAE;IAChBD,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAO,EAAE;EACX;EAEA,MAAMY,QAAQ,GAAGD,MAAM,GAAGX,KAAK,GAAGa,sBAAO,CAACC,KAAK;EAC/C,MAAMC,UAAU,GAAGJ,MAAM,GAAGX,KAAK,GAAGa,sBAAO,CAACG,IAAI;EAEhD,IAAI,CAACT,IAAI,EAAE;IACTK,QAAQ,CACN,qKACF,CAAC;IACD,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;EAC/B;EAEA,IAAI,CAACT,WAAW,CAACc,QAAQ,CAACV,IAAI,CAAC,EAAE;IAC/BQ,UAAU,CACR,aAAaR,IAAI,wKACnB,CAAC;EACH;;EAEA;EACA,OAAO,CACL,QAAQA,IAAI,QAAQ;EACpB;EACA;EACA;EACAA,IAAI,KAAK,MAAM,IAAI,YAAY,EAC/B,QAAQA,IAAI,EAAE,EACd,MAAM,CACP,CAACW,MAAM,CAACC,OAAO,CAAC;AACnB;;AAEA;AACA;AACA;AACA;AACO,SAASC,aAAaA,CAC3BC,QAAkB,EAClB;EACEC,SAAS,GAAGd,OAAO,CAACC;AAItB,CAAC,GAAG,CAAC,CAAC,EACN;EACA,IAAI,CAACR,SAAS,CAAC,CAAC,EAAE;IAChBD,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAO;MAAES,GAAG,EAAE,CAAC,CAAC;MAAEc,KAAK,EAAE;IAAG,CAAC;EAC/B;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMC,aAAwB,GAAG,CAAC,CAAC;EACnC,MAAMC,cAAwB,GAAG,EAAE;;EAEnC;EACA;EACA,CAAC,GAAGJ,QAAQ,CAAC,CAACK,OAAO,CAAC,CAAC,CAACC,OAAO,CAAEC,OAAO,IAAK;IAC3C,IAAI;MACF,MAAMC,cAAc,GAAGC,iBAAE,CAACC,YAAY,CAACH,OAAO,EAAE,MAAM,CAAC;MACvD,MAAMI,aAAa,GAAG,IAAAC,cAAK,EAACJ,cAAc,CAAC;MAE3CJ,cAAc,CAACS,IAAI,CAACN,OAAO,CAAC;MAC5B5B,KAAK,CAAC,sCAAsC4B,OAAO,EAAE,CAAC;MAEtD,KAAK,MAAMO,GAAG,IAAIC,MAAM,CAACC,IAAI,CAACL,aAAa,CAAC,EAAE;QAC5C,IAAI,OAAOR,aAAa,CAACW,GAAG,CAAC,KAAK,WAAW,EAAE;UAC7CnC,KAAK,CAAC,IAAImC,GAAG,4CAA4CP,OAAO,EAAE,CAAC;QACrE;QAEAJ,aAAa,CAACW,GAAG,CAAC,GAAGH,aAAa,CAACG,GAAG,CAAC;MACzC;IACF,CAAC,CAAC,OAAOrB,KAAU,EAAE;MACnB,IAAI,MAAM,IAAIA,KAAK,IAAIA,KAAK,CAACwB,IAAI,KAAK,QAAQ,EAAE;QAC9C,OAAOtC,KAAK,CAAC,GAAG4B,OAAO,yCAAyC,CAAC;MACnE;MACA,IAAI,MAAM,IAAId,KAAK,IAAIA,KAAK,CAACwB,IAAI,KAAK,QAAQ,EAAE;QAC9C,OAAOtC,KAAK,CAAC,GAAG4B,OAAO,yCAAyC,CAAC;MACnE;MACA,IAAI,MAAM,IAAId,KAAK,IAAIA,KAAK,CAACwB,IAAI,KAAK,QAAQ,EAAE;QAC9C,OAAOtC,KAAK,CAAC,yBAAyB4B,OAAO,0BAA0B,CAAC;MAC1E;MAEA,MAAMd,KAAK;IACb;EACF,CAAC,CAAC;EAEF,OAAO;IACLL,GAAG,EAAE,IAAA8B,eAAM,EAACf,aAAa,EAAEF,SAAS,CAAC;IACrCC,KAAK,EAAEE,cAAc,CAACC,OAAO,CAAC;EAChC,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASc,YAAYA,CAC1BnB,QAAkB,EAClB;EACEoB,KAAK;EACL9B,MAAM,GAAG,KAAK;EACdW,SAAS,GAAGd,OAAO,CAACC;AAMtB,CAAC,GAAG,CAAC,CAAC,EACN;EACA,IAAI,CAACgC,KAAK,IAAInB,SAAS,CAACjB,eAAe,CAAC,EAAE;IACxC,OAAO;MAAEqC,MAAM,EAAE,SAAkB;MAAEC,MAAM,EAAEC,IAAI,CAACX,KAAK,CAACX,SAAS,CAACjB,eAAe,CAAC;IAAE,CAAC;EACvF;EAEA,MAAMwC,MAAM,GAAGzB,aAAa,CAACC,QAAQ,EAAE;IAAEC;EAAU,CAAC,CAAC;EACrD,MAAMwB,aAAuB,GAAG,EAAE;EAElC,KAAK,MAAMX,GAAG,IAAIU,MAAM,CAACpC,GAAG,EAAE;IAC5B,IAAI,OAAOa,SAAS,CAACa,GAAG,CAAC,KAAK,WAAW,EAAE;MACzCnC,KAAK,CAAC,IAAImC,GAAG,6CAA6C,CAAC;IAC7D,CAAC,MAAM;MACLb,SAAS,CAACa,GAAG,CAAC,GAAGU,MAAM,CAACpC,GAAG,CAAC0B,GAAG,CAAC;MAChCW,aAAa,CAACZ,IAAI,CAACC,GAAG,CAAC;IACzB;EACF;;EAEA;EACAb,SAAS,CAACjB,eAAe,CAAC,GAAGuC,IAAI,CAACG,SAAS,CAACD,aAAa,CAAC;EAE1D,OAAO;IAAEJ,MAAM,EAAE,QAAiB;IAAE,GAAGG,MAAM;IAAEF,MAAM,EAAEG;EAAc,CAAC;AACxE;;AAEA;AACA;AACA;AACA;AACO,SAASE,eAAeA,CAC7BC,WAAmB,EACnBC,OAAiF,EACjF;EACA,OAAO9B,aAAa,CAClBd,WAAW,CAAC4C,OAAO,CAAC,CAACC,GAAG,CAAEvB,OAAO,IAAKwB,mBAAI,CAACC,IAAI,CAACJ,WAAW,EAAErB,OAAO,CAAC,CAAC,EACtEsB,OACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASI,cAAcA,CAC5BL,WAAmB,EACnBC,OAAgF,EAChF;EACA,OAAOV,YAAY,CACjBlC,WAAW,CAAC4C,OAAO,CAAC,CAACC,GAAG,CAAEvB,OAAO,IAAKwB,mBAAI,CAACC,IAAI,CAACJ,WAAW,EAAErB,OAAO,CAAC,CAAC,EACtEsB,OACF,CAAC;AACH;;AAEA;AACO,SAASK,YAAYA,CAC1BC,OAAwC,EACxCN,OAA2C,GAAG,CAAC,CAAC,EAChD;EACA;EACA,IAAIA,OAAO,CAACT,KAAK,IAAIS,OAAO,CAACvC,MAAM,IAAI,CAAC6C,OAAO,CAACb,MAAM,CAACc,MAAM,EAAE,OAAOD,OAAO;;EAE7E;EACA,IAAIA,OAAO,CAACd,MAAM,KAAK,QAAQ,EAAE;IAC/B7B,sBAAO,CAAC6C,GAAG,CACTC,gBAAK,CAACC,IAAI,CAAC,WAAW,EAAEJ,OAAO,CAACjC,KAAK,CAAC4B,GAAG,CAAEU,IAAI,IAAKT,mBAAI,CAACU,QAAQ,CAACD,IAAI,CAAC,CAAC,CAACR,IAAI,CAAC,GAAG,CAAC,CACpF,CAAC;EACH;;EAEA;EACAxC,sBAAO,CAAC6C,GAAG,CAACC,gBAAK,CAACC,IAAI,CAAC,aAAa,EAAEJ,OAAO,CAACb,MAAM,CAACU,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;EAEhE,OAAOG,OAAO;AAChB;;AAEA;;AAEA,IAAIO,IAA6C,GAAG,IAAI;;AAExD;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,GAAGA,CACjBf,WAAmB,EACnB;EACER,KAAK;EACL9B;AAIF,CAAC,GAAG,CAAC,CAAC,EACN;EACA,IAAI,CAACV,SAAS,CAAC,CAAC,EAAE;IAChBD,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAO;MAAES,GAAG,EAAE,CAAC,CAAC;MAAEc,KAAK,EAAE;IAAG,CAAC;EAC/B;EACA,IAAIkB,KAAK,IAAI,CAACsB,IAAI,EAAE;IAClBA,IAAI,GAAGf,eAAe,CAACC,WAAW,EAAE;MAAEtC;IAAO,CAAC,CAAC;EACjD;EACA,OAAOoD,IAAI;AACb;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASE,IAAIA,CAClBhB,WAAmB,EACnBC,OAGC,GAAG,CAAC,CAAC,EACN;EACA,IAAI,CAACjD,SAAS,CAAC,CAAC,EAAE;IAChBD,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAOQ,OAAO,CAACC,GAAG;EACpB;EAEA,MAAM+C,OAAO,GAAGQ,GAAG,CAACf,WAAW,EAAEC,OAAO,CAAC;EACzC,MAAMJ,aAAuB,GAAG,EAAE;EAElC,KAAK,MAAMX,GAAG,IAAIqB,OAAO,CAAC/C,GAAG,EAAE;IAC7B,IAAI,OAAOD,OAAO,CAACC,GAAG,CAAC0B,GAAG,CAAC,KAAK,WAAW,EAAE;MAC3CnC,KAAK,CAAC,IAAImC,GAAG,6CAA6C,CAAC;IAC7D,CAAC,MAAM;MACL;MACA3B,OAAO,CAACC,GAAG,CAAC0B,GAAG,CAAC,GAAGqB,OAAO,CAAC/C,GAAG,CAAC0B,GAAG,CAAC;MACnCW,aAAa,CAACZ,IAAI,CAACC,GAAG,CAAC;IACzB;EACF;;EAEA;EACAoB,YAAY,CAAC;IAAE,GAAGC,OAAO;IAAEd,MAAM,EAAE,QAAQ;IAAEC,MAAM,EAAEG;EAAc,CAAC,EAAEI,OAAO,CAAC;EAE9E,OAAO1C,OAAO,CAACC,GAAG;AACpB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASyD,QAAQA,CAAC3D,IAAwB,EAAE;EAAEI,MAAM,GAAG;AAA4B,CAAC,GAAG,CAAC,CAAC,EAAE;EAChG,IAAI,CAACV,SAAS,CAAC,CAAC,EAAE;IAChBD,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAO,EAAE;EACX;EAEA,OAAOM,WAAW,CAAC;IAAEC,IAAI;IAAEI;EAAO,CAAC,CAAC;AACtC;;AAEA;AACA;AACA;AACO,SAASwD,QAAQA,CAACC,QAAgB,EAAEC,SAAqB,EAAa;EAC3E,IAAI;IACF,MAAM5D,GAAG,GAAG,IAAAwB,cAAK,EAACmC,QAAQ,CAAC;IAC3B,OAAO,IAAA7B,eAAM,EAAC9B,GAAG,EAAE4D,SAAS,IAAI,CAAC,CAAC,CAAC;EACrC,CAAC,CAAC,MAAM;IACN,OAAO,CAAC,CAAC;EACX;AACF","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_chalk","data","_interopRequireDefault","require","_getenv","_nodeConsole","_nodeFs","_nodePath","_constants","_parse","e","__esModule","default","debug","ORIGINAL_ENV_BACKUP_KEY","Symbol","for","globalStore","globalThis","originalEnvBackup","WeakMap","rememberOriginal","systemEnv","key","isUnsafeAllowedEnvKey","backup","get","Map","set","has","isEnabled","boolish","KNOWN_MODES","exports","LOADED_ENV_NAME","getEnvFiles","mode","process","env","NODE_ENV","silent","logError","console","error","logWarning","warn","includes","filter","Boolean","parseEnvFiles","envFiles","files","sensitiveLoadedKeys","loadedEnvVars","loadedEnvFiles","blockedByFile","localOnlyByFile","sensitive","Set","reverse","forEach","envFile","envFileContent","fs","readFileSync","envFileParsed","parse","isLocalFile","path","basename","endsWith","push","Object","keys","isIgnoredEnvKey","isLocalEnvKey","add","code","violations","length","formatBlockedViolation","formatLocalOnlyViolation","Error","join","expand","formatViolationFiles","byFile","entries","map","file","loadEnvFiles","force","result","loaded","JSON","parsed","loadedEnvKeys","stringify","parseProjectEnv","projectRoot","options","loadProjectEnv","getOriginalEnv","original","undefined","getOriginalEnvValue","logLoadedEnv","envInfo","log","chalk","gray","yellow","memo","load","getFiles","parseEnv","contents","sourceEnv"],"sources":["../src/index.ts"],"sourcesContent":["import chalk from 'chalk';\nimport { boolish } from 'getenv';\nimport console from 'node:console';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { isIgnoredEnvKey, isLocalEnvKey, isUnsafeAllowedEnvKey } from './constants';\nimport { parse, expand, type EnvOutput } from './parse';\n\nconst debug = require('debug')('expo:env') as typeof console.log;\n\ntype EnvBackupStore = WeakMap<EnvOutput, Map<string, string | undefined>>;\n\nconst ORIGINAL_ENV_BACKUP_KEY = Symbol.for('@expo/env.originalEnvBackup.v1');\nconst globalStore = globalThis as Record<symbol, EnvBackupStore | undefined>;\nconst originalEnvBackup: EnvBackupStore =\n  globalStore[ORIGINAL_ENV_BACKUP_KEY] ?? (globalStore[ORIGINAL_ENV_BACKUP_KEY] = new WeakMap());\n\nfunction rememberOriginal(systemEnv: EnvOutput, key: string): void {\n  if (isUnsafeAllowedEnvKey(key)) return;\n  let backup = originalEnvBackup.get(systemEnv);\n  if (!backup) {\n    backup = new Map();\n    originalEnvBackup.set(systemEnv, backup);\n  }\n  if (!backup.has(key)) {\n    backup.set(key, systemEnv[key]);\n  }\n}\n\n/** Determine if the `.env` files are enabled or not, through `EXPO_NO_DOTENV` */\nexport function isEnabled() {\n  return !boolish('EXPO_NO_DOTENV', false);\n}\n\n/** All conventional modes that should not cause warnings */\nexport const KNOWN_MODES = ['development', 'test', 'production'];\n\n/** The environment variable name to use when marking the environment as loaded */\nexport const LOADED_ENV_NAME = '__EXPO_ENV_LOADED';\n\n/**\n * Get a list of all `.env*` files based on the `NODE_ENV` mode.\n * This returns a list of files, in order of highest priority to lowest priority.\n *\n * @see https://github.com/bkeepers/dotenv/tree/v3.1.4#customizing-rails\n */\nexport function getEnvFiles({\n  mode = process.env.NODE_ENV,\n  silent,\n}: {\n  /** The mode to use when creating the list of `.env*` files, defaults to `NODE_ENV` */\n  mode?: string;\n  /** If possible misconfiguration warnings should be logged, or only logged as debug log */\n  silent?: boolean;\n} = {}) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return [];\n  }\n\n  const logError = silent ? debug : console.error;\n  const logWarning = silent ? debug : console.warn;\n\n  if (!mode) {\n    logError(\n      `The NODE_ENV environment variable is required but was not specified. Ensure the project is bundled with Expo CLI or NODE_ENV is set. Using only .env.local and .env`\n    );\n    return ['.env.local', '.env'];\n  }\n\n  if (!KNOWN_MODES.includes(mode)) {\n    logWarning(\n      `NODE_ENV=\"${mode}\" is non-conventional and might cause development code to run in production. Use \"development\", \"test\", or \"production\" instead. Continuing with non-conventional mode`\n    );\n  }\n\n  // see: https://github.com/bkeepers/dotenv/tree/v3.1.4#customizing-rails\n  return [\n    `.env.${mode}.local`,\n    // Don't include `.env.local` for `test` environment\n    // since normally you expect tests to produce the same\n    // results for everyone\n    mode !== 'test' && `.env.local`,\n    `.env.${mode}`,\n    `.env`,\n  ].filter(Boolean) as string[];\n}\n\n/**\n * Parse all environment variables using the list of `.env*` files, in order of higest priority to lowest priority.\n * This does not check for collisions of existing system environment variables, or mutates the system environment variables.\n */\nexport function parseEnvFiles(\n  envFiles: string[],\n  {\n    systemEnv = process.env,\n  }: {\n    /** The system environment to use when expanding environment variables, defaults to `process.env` */\n    systemEnv?: EnvOutput;\n  } = {}\n) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return { env: {}, files: [], sensitiveLoadedKeys: [] as string[] };\n  }\n\n  // Load environment variables from .env* files. Suppress warnings using silent\n  // if this file is missing. Dotenv will only parse the environment variables,\n  // `@expo/env` will set the resulting variables to the current process.\n  // Variable expansion is supported in .env files, and executed as final step.\n  // https://github.com/motdotla/dotenv\n  // https://github.com/motdotla/dotenv-expand\n  const loadedEnvVars: EnvOutput = {};\n  const loadedEnvFiles: string[] = [];\n  const blockedByFile: Record<string, string[]> = {};\n  const localOnlyByFile: Record<string, string[]> = {};\n  const sensitive = new Set<string>();\n\n  // Iterate over each dotenv file in lowest prio to highest prio order.\n  // This step won't write to the process.env, but will overwrite the parsed envs.\n  [...envFiles].reverse().forEach((envFile) => {\n    try {\n      const envFileContent = fs.readFileSync(envFile, 'utf8');\n      const envFileParsed = parse(envFileContent);\n      const isLocalFile = path.basename(envFile).endsWith('.local');\n\n      loadedEnvFiles.push(envFile);\n      debug(`Loaded environment variables from: ${envFile}`);\n\n      for (const key of Object.keys(envFileParsed)) {\n        if (isIgnoredEnvKey(key)) {\n          (blockedByFile[envFile] ||= []).push(key);\n          debug(`\"${key}\" is blocked from dotenv files, skipping in: ${envFile}`);\n          continue;\n        }\n        if (!isLocalFile && isLocalEnvKey(key)) {\n          (localOnlyByFile[envFile] ||= []).push(key);\n          debug(`\"${key}\" is only allowed in .local env files, skipping in: ${envFile}`);\n          continue;\n        }\n        if (isLocalFile && isLocalEnvKey(key)) {\n          sensitive.add(key);\n        }\n        if (typeof loadedEnvVars[key] !== 'undefined') {\n          debug(`\"${key}\" is already defined and overwritten by: ${envFile}`);\n        }\n\n        loadedEnvVars[key] = envFileParsed[key];\n      }\n    } catch (error: any) {\n      if ('code' in error && error.code === 'ENOENT') {\n        return debug(`${envFile} does not exist, skipping this env file`);\n      }\n      if ('code' in error && error.code === 'EISDIR') {\n        return debug(`${envFile} is a directory, skipping this env file`);\n      }\n      if ('code' in error && error.code === 'EACCES') {\n        return debug(`No permission to read ${envFile}, skipping this env file`);\n      }\n\n      throw error;\n    }\n  });\n\n  const violations: string[] = [];\n  if (Object.keys(blockedByFile).length > 0) {\n    violations.push(formatBlockedViolation(blockedByFile));\n  }\n  if (Object.keys(localOnlyByFile).length > 0) {\n    violations.push(formatLocalOnlyViolation(localOnlyByFile));\n  }\n  if (violations.length > 0) {\n    throw new Error(violations.join('\\n\\n'));\n  }\n\n  const env = expand(loadedEnvVars, systemEnv);\n  for (const key in env) {\n    rememberOriginal(systemEnv, key);\n  }\n\n  return {\n    env,\n    files: loadedEnvFiles.reverse(),\n    sensitiveLoadedKeys: [...sensitive],\n  };\n}\n\nfunction formatViolationFiles(byFile: Record<string, string[]>): string {\n  return Object.entries(byFile)\n    .map(([file, keys]) => `  ${path.basename(file)}: ${keys.join(', ')}`)\n    .join('\\n');\n}\n\nfunction formatBlockedViolation(byFile: Record<string, string[]>): string {\n  return [\n    'Refused to load dangerous environment variables from .env files.',\n    'Opt in via EXPO_UNSAFE_DOTENV_KEYS in your shell environment if you truly need them.',\n    '',\n    formatViolationFiles(byFile),\n  ].join('\\n');\n}\n\nfunction formatLocalOnlyViolation(byFile: Record<string, string[]>): string {\n  return [\n    'Refused to load personal environment variables from a non-.local env file.',\n    'Move them to a .local env file.',\n    '',\n    formatViolationFiles(byFile),\n  ].join('\\n');\n}\n\n/**\n * Parse all environment variables using the list of `.env*` files, and mutate the system environment with these variables.\n * This won't override existing environment variables defined in the system environment.\n * Once the mutations are done, this will also set a propert `__EXPO_ENV=true` on the system env to avoid multiple mutations.\n * This check can be disabled through `{ force: true }`.\n */\nexport function loadEnvFiles(\n  envFiles: string[],\n  {\n    force,\n    silent = false,\n    systemEnv = process.env,\n  }: Parameters<typeof parseEnvFiles>[1] & {\n    /** If the environment variables should be applied to the system environment, regardless of previous mutations */\n    force?: boolean;\n    /** If possible misconfiguration warnings should be logged, or only logged as debug log */\n    silent?: boolean;\n  } = {}\n) {\n  if (!force && systemEnv[LOADED_ENV_NAME]) {\n    return { result: 'skipped' as const, loaded: JSON.parse(systemEnv[LOADED_ENV_NAME]) };\n  }\n\n  const parsed = parseEnvFiles(envFiles, { systemEnv });\n  const loadedEnvKeys: string[] = [];\n\n  for (const key in parsed.env) {\n    if (typeof systemEnv[key] !== 'undefined') {\n      debug(`\"${key}\" is already defined and IS NOT overwritten`);\n    } else {\n      rememberOriginal(systemEnv, key);\n      systemEnv[key] = parsed.env[key];\n      loadedEnvKeys.push(key);\n    }\n  }\n\n  // Mark the environment as loaded\n  rememberOriginal(systemEnv, LOADED_ENV_NAME);\n  systemEnv[LOADED_ENV_NAME] = JSON.stringify(loadedEnvKeys);\n\n  return { result: 'loaded' as const, ...parsed, loaded: loadedEnvKeys };\n}\n\n/**\n * Parse all environment variables using the detected list of `.env*` files from a project.\n * This does not check for collisions of existing system environment variables, or mutates the system environment variables.\n */\nexport function parseProjectEnv(\n  projectRoot: string,\n  options?: Parameters<typeof getEnvFiles>[0] & Parameters<typeof parseEnvFiles>[1]\n) {\n  return parseEnvFiles(\n    getEnvFiles(options).map((envFile) => path.join(projectRoot, envFile)),\n    options\n  );\n}\n\n/**\n * Parse all environment variables using the detected list of `.env*` files from a project.\n * This won't override existing environment variables defined in the system environment.\n * Once the mutations are done, this will also set a propert `__EXPO_ENV=true` on the system env to avoid multiple mutations.\n * This check can be disabled through `{ force: true }`.\n */\nexport function loadProjectEnv(\n  projectRoot: string,\n  options?: Parameters<typeof getEnvFiles>[0] & Parameters<typeof loadEnvFiles>[1]\n) {\n  return loadEnvFiles(\n    getEnvFiles(options).map((envFile) => path.join(projectRoot, envFile)),\n    options\n  );\n}\n\n/**\n * Get a fresh clone of the system environment with all `@expo/env`-applied\n * mutations reverted to their pre-load values. The result is intended to be\n * passed as the `env` option of `child_process.spawn` / `@expo/spawn-async`\n * when a subprocess should observe the environment as it was before any\n * `.env*` files were loaded — for example, when resolving SDK tooling paths\n * that should not be influenced by project-controlled `.env` values.\n *\n * Allocates lazily: nothing is held until this function is called, and each\n * call returns a new object so callers may mutate it freely.\n *\n * @param systemEnv The env to revert against; defaults to `process.env`.\n */\nexport function getOriginalEnv(systemEnv: EnvOutput = process.env): EnvOutput {\n  const result: EnvOutput = { ...systemEnv };\n  const backup = originalEnvBackup.get(systemEnv);\n  if (backup) {\n    for (const [key, original] of backup) {\n      if (original === undefined) {\n        delete result[key];\n      } else {\n        result[key] = original;\n      }\n    }\n  }\n  return result;\n}\n\n/**\n * Get the pre-load value of a single environment variable as recorded by\n * `@expo/env`. Falls through to the value in `systemEnv` for keys that\n * `@expo/env` never touched. O(1) and allocation-free, intended for read-sites\n * that resolve filesystem paths or executables from a single env var.\n *\n * Honors `EXPO_UNSAFE_DOTENV_KEYS`: keys the caller has explicitly opted into\n * via the escape hatch return their currently loaded value, not the original.\n *\n * @param key The environment variable to read.\n * @param systemEnv The env to read against; defaults to `process.env`.\n */\nexport function getOriginalEnvValue(\n  key: string,\n  systemEnv: EnvOutput = process.env\n): string | undefined {\n  const backup = originalEnvBackup.get(systemEnv);\n  if (backup && backup.has(key)) {\n    return backup.get(key);\n  }\n  return systemEnv[key];\n}\n\n/** Log the loaded environment info from the loaded results */\nexport function logLoadedEnv(\n  envInfo: ReturnType<typeof loadEnvFiles>,\n  options: Parameters<typeof loadEnvFiles>[1] = {}\n) {\n  // Skip when running in force mode, or no environment variables are loaded\n  if (options.force || options.silent || !envInfo.loaded.length) return envInfo;\n\n  // Log the loaded environment files, when not skipped\n  if (envInfo.result === 'loaded') {\n    console.log(\n      chalk.gray('env: load', envInfo.files.map((file) => path.basename(file)).join(' '))\n    );\n  }\n\n  // Log the loaded environment variables\n  console.log(chalk.gray('env: export', envInfo.loaded.join(' ')));\n\n  // Highlight developer-tool roots / secrets that were loaded from a .local file —\n  // the same keys would be refused from any non-.local file. Surfacing them here\n  // tells the user which \"sensitive\" values are influencing the build.\n  if (envInfo.result === 'loaded' && envInfo.sensitiveLoadedKeys?.length) {\n    console.log(chalk.yellow('env: export (sensitive)', envInfo.sensitiveLoadedKeys.join(' ')));\n  }\n\n  return envInfo;\n}\n\n// Legacy API - for backwards compatibility\n\nlet memo: ReturnType<typeof parseEnvFiles> | null = null;\n\n/**\n * Get the environment variables without mutating the environment.\n * This returns memoized values unless the `force` property is provided.\n *\n * @deprecated use {@link parseProjectEnv} instead\n */\nexport function get(\n  projectRoot: string,\n  {\n    force,\n    silent,\n  }: {\n    force?: boolean;\n    silent?: boolean;\n  } = {}\n) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return { env: {}, files: [], sensitiveLoadedKeys: [] as string[] };\n  }\n  if (force || !memo) {\n    memo = parseProjectEnv(projectRoot, { silent });\n  }\n  return memo;\n}\n\n/**\n * Load environment variables from .env files and mutate the current `process.env` with the results.\n *\n * @deprecated use {@link loadProjectEnv} instead\n */\nexport function load(\n  projectRoot: string,\n  options: {\n    force?: boolean;\n    silent?: boolean;\n  } = {}\n) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return process.env;\n  }\n\n  const envInfo = get(projectRoot, options);\n  const loadedEnvKeys: string[] = [];\n\n  for (const key in envInfo.env) {\n    if (typeof process.env[key] !== 'undefined') {\n      debug(`\"${key}\" is already defined and IS NOT overwritten`);\n    } else {\n      // Avoid creating a new object, mutate it instead as this causes problems in Bun\n      rememberOriginal(process.env, key);\n      process.env[key] = envInfo.env[key];\n      loadedEnvKeys.push(key);\n    }\n  }\n\n  // Port the result of `get` to the newer result object\n  logLoadedEnv({ ...envInfo, result: 'loaded', loaded: loadedEnvKeys }, options);\n\n  return process.env;\n}\n\n/**\n * Get a list of all `.env*` files based on the `NODE_ENV` mode.\n * This returns a list of files, in order of highest priority to lowest priority.\n *\n * @deprecated use {@link getEnvFiles} instead\n * @see https://github.com/bkeepers/dotenv/tree/v3.1.4#customizing-rails\n */\nexport function getFiles(mode: string | undefined, { silent = false }: { silent?: boolean } = {}) {\n  if (!isEnabled()) {\n    debug(`Skipping .env files because EXPO_NO_DOTENV is defined`);\n    return [];\n  }\n\n  return getEnvFiles({ mode, silent });\n}\n\n/**\n * Parses the contents of a single `.env` file, optionally expanding it immediately.\n */\nexport function parseEnv(contents: string, sourceEnv?: EnvOutput): EnvOutput {\n  try {\n    const env = parse(contents);\n    for (const key in env) {\n      if (isIgnoredEnvKey(key)) {\n        delete env[key];\n      }\n    }\n    return expand(env, sourceEnv || {});\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,SAAAA,OAAA;EAAA,MAAAC,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAH,MAAA,YAAAA,CAAA;IAAA,OAAAC,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAG,QAAA;EAAA,MAAAH,IAAA,GAAAE,OAAA;EAAAC,OAAA,YAAAA,CAAA;IAAA,OAAAH,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAI,aAAA;EAAA,MAAAJ,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAE,YAAA,YAAAA,CAAA;IAAA,OAAAJ,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAK,QAAA;EAAA,MAAAL,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAG,OAAA,YAAAA,CAAA;IAAA,OAAAL,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAM,UAAA;EAAA,MAAAN,IAAA,GAAAC,sBAAA,CAAAC,OAAA;EAAAI,SAAA,YAAAA,CAAA;IAAA,OAAAN,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AAEA,SAAAO,WAAA;EAAA,MAAAP,IAAA,GAAAE,OAAA;EAAAK,UAAA,YAAAA,CAAA;IAAA,OAAAP,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAQ,OAAA;EAAA,MAAAR,IAAA,GAAAE,OAAA;EAAAM,MAAA,YAAAA,CAAA;IAAA,OAAAR,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AAAwD,SAAAC,uBAAAQ,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAExD,MAAMG,KAAK,GAAGV,OAAO,CAAC,OAAO,CAAC,CAAC,UAAU,CAAuB;AAIhE,MAAMW,uBAAuB,GAAGC,MAAM,CAACC,GAAG,CAAC,gCAAgC,CAAC;AAC5E,MAAMC,WAAW,GAAGC,UAAwD;AAC5E,MAAMC,iBAAiC,GACrCF,WAAW,CAACH,uBAAuB,CAAC,KAAKG,WAAW,CAACH,uBAAuB,CAAC,GAAG,IAAIM,OAAO,CAAC,CAAC,CAAC;AAEhG,SAASC,gBAAgBA,CAACC,SAAoB,EAAEC,GAAW,EAAQ;EACjE,IAAI,IAAAC,kCAAqB,EAACD,GAAG,CAAC,EAAE;EAChC,IAAIE,MAAM,GAAGN,iBAAiB,CAACO,GAAG,CAACJ,SAAS,CAAC;EAC7C,IAAI,CAACG,MAAM,EAAE;IACXA,MAAM,GAAG,IAAIE,GAAG,CAAC,CAAC;IAClBR,iBAAiB,CAACS,GAAG,CAACN,SAAS,EAAEG,MAAM,CAAC;EAC1C;EACA,IAAI,CAACA,MAAM,CAACI,GAAG,CAACN,GAAG,CAAC,EAAE;IACpBE,MAAM,CAACG,GAAG,CAACL,GAAG,EAAED,SAAS,CAACC,GAAG,CAAC,CAAC;EACjC;AACF;;AAEA;AACO,SAASO,SAASA,CAAA,EAAG;EAC1B,OAAO,CAAC,IAAAC,iBAAO,EAAC,gBAAgB,EAAE,KAAK,CAAC;AAC1C;;AAEA;AACO,MAAMC,WAAW,GAAAC,OAAA,CAAAD,WAAA,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC;;AAEhE;AACO,MAAME,eAAe,GAAAD,OAAA,CAAAC,eAAA,GAAG,mBAAmB;;AAElD;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,WAAWA,CAAC;EAC1BC,IAAI,GAAGC,OAAO,CAACC,GAAG,CAACC,QAAQ;EAC3BC;AAMF,CAAC,GAAG,CAAC,CAAC,EAAE;EACN,IAAI,CAACV,SAAS,CAAC,CAAC,EAAE;IAChBjB,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAO,EAAE;EACX;EAEA,MAAM4B,QAAQ,GAAGD,MAAM,GAAG3B,KAAK,GAAG6B,sBAAO,CAACC,KAAK;EAC/C,MAAMC,UAAU,GAAGJ,MAAM,GAAG3B,KAAK,GAAG6B,sBAAO,CAACG,IAAI;EAEhD,IAAI,CAACT,IAAI,EAAE;IACTK,QAAQ,CACN,qKACF,CAAC;IACD,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;EAC/B;EAEA,IAAI,CAACT,WAAW,CAACc,QAAQ,CAACV,IAAI,CAAC,EAAE;IAC/BQ,UAAU,CACR,aAAaR,IAAI,wKACnB,CAAC;EACH;;EAEA;EACA,OAAO,CACL,QAAQA,IAAI,QAAQ;EACpB;EACA;EACA;EACAA,IAAI,KAAK,MAAM,IAAI,YAAY,EAC/B,QAAQA,IAAI,EAAE,EACd,MAAM,CACP,CAACW,MAAM,CAACC,OAAO,CAAC;AACnB;;AAEA;AACA;AACA;AACA;AACO,SAASC,aAAaA,CAC3BC,QAAkB,EAClB;EACE5B,SAAS,GAAGe,OAAO,CAACC;AAItB,CAAC,GAAG,CAAC,CAAC,EACN;EACA,IAAI,CAACR,SAAS,CAAC,CAAC,EAAE;IAChBjB,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAO;MAAEyB,GAAG,EAAE,CAAC,CAAC;MAAEa,KAAK,EAAE,EAAE;MAAEC,mBAAmB,EAAE;IAAe,CAAC;EACpE;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMC,aAAwB,GAAG,CAAC,CAAC;EACnC,MAAMC,cAAwB,GAAG,EAAE;EACnC,MAAMC,aAAuC,GAAG,CAAC,CAAC;EAClD,MAAMC,eAAyC,GAAG,CAAC,CAAC;EACpD,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAAS,CAAC;;EAEnC;EACA;EACA,CAAC,GAAGR,QAAQ,CAAC,CAACS,OAAO,CAAC,CAAC,CAACC,OAAO,CAAEC,OAAO,IAAK;IAC3C,IAAI;MACF,MAAMC,cAAc,GAAGC,iBAAE,CAACC,YAAY,CAACH,OAAO,EAAE,MAAM,CAAC;MACvD,MAAMI,aAAa,GAAG,IAAAC,cAAK,EAACJ,cAAc,CAAC;MAC3C,MAAMK,WAAW,GAAGC,mBAAI,CAACC,QAAQ,CAACR,OAAO,CAAC,CAACS,QAAQ,CAAC,QAAQ,CAAC;MAE7DhB,cAAc,CAACiB,IAAI,CAACV,OAAO,CAAC;MAC5BhD,KAAK,CAAC,sCAAsCgD,OAAO,EAAE,CAAC;MAEtD,KAAK,MAAMtC,GAAG,IAAIiD,MAAM,CAACC,IAAI,CAACR,aAAa,CAAC,EAAE;QAC5C,IAAI,IAAAS,4BAAe,EAACnD,GAAG,CAAC,EAAE;UACxB,CAACgC,aAAa,CAACM,OAAO,CAAC,KAAK,EAAE,EAAEU,IAAI,CAAChD,GAAG,CAAC;UACzCV,KAAK,CAAC,IAAIU,GAAG,gDAAgDsC,OAAO,EAAE,CAAC;UACvE;QACF;QACA,IAAI,CAACM,WAAW,IAAI,IAAAQ,0BAAa,EAACpD,GAAG,CAAC,EAAE;UACtC,CAACiC,eAAe,CAACK,OAAO,CAAC,KAAK,EAAE,EAAEU,IAAI,CAAChD,GAAG,CAAC;UAC3CV,KAAK,CAAC,IAAIU,GAAG,uDAAuDsC,OAAO,EAAE,CAAC;UAC9E;QACF;QACA,IAAIM,WAAW,IAAI,IAAAQ,0BAAa,EAACpD,GAAG,CAAC,EAAE;UACrCkC,SAAS,CAACmB,GAAG,CAACrD,GAAG,CAAC;QACpB;QACA,IAAI,OAAO8B,aAAa,CAAC9B,GAAG,CAAC,KAAK,WAAW,EAAE;UAC7CV,KAAK,CAAC,IAAIU,GAAG,4CAA4CsC,OAAO,EAAE,CAAC;QACrE;QAEAR,aAAa,CAAC9B,GAAG,CAAC,GAAG0C,aAAa,CAAC1C,GAAG,CAAC;MACzC;IACF,CAAC,CAAC,OAAOoB,KAAU,EAAE;MACnB,IAAI,MAAM,IAAIA,KAAK,IAAIA,KAAK,CAACkC,IAAI,KAAK,QAAQ,EAAE;QAC9C,OAAOhE,KAAK,CAAC,GAAGgD,OAAO,yCAAyC,CAAC;MACnE;MACA,IAAI,MAAM,IAAIlB,KAAK,IAAIA,KAAK,CAACkC,IAAI,KAAK,QAAQ,EAAE;QAC9C,OAAOhE,KAAK,CAAC,GAAGgD,OAAO,yCAAyC,CAAC;MACnE;MACA,IAAI,MAAM,IAAIlB,KAAK,IAAIA,KAAK,CAACkC,IAAI,KAAK,QAAQ,EAAE;QAC9C,OAAOhE,KAAK,CAAC,yBAAyBgD,OAAO,0BAA0B,CAAC;MAC1E;MAEA,MAAMlB,KAAK;IACb;EACF,CAAC,CAAC;EAEF,MAAMmC,UAAoB,GAAG,EAAE;EAC/B,IAAIN,MAAM,CAACC,IAAI,CAAClB,aAAa,CAAC,CAACwB,MAAM,GAAG,CAAC,EAAE;IACzCD,UAAU,CAACP,IAAI,CAACS,sBAAsB,CAACzB,aAAa,CAAC,CAAC;EACxD;EACA,IAAIiB,MAAM,CAACC,IAAI,CAACjB,eAAe,CAAC,CAACuB,MAAM,GAAG,CAAC,EAAE;IAC3CD,UAAU,CAACP,IAAI,CAACU,wBAAwB,CAACzB,eAAe,CAAC,CAAC;EAC5D;EACA,IAAIsB,UAAU,CAACC,MAAM,GAAG,CAAC,EAAE;IACzB,MAAM,IAAIG,KAAK,CAACJ,UAAU,CAACK,IAAI,CAAC,MAAM,CAAC,CAAC;EAC1C;EAEA,MAAM7C,GAAG,GAAG,IAAA8C,eAAM,EAAC/B,aAAa,EAAE/B,SAAS,CAAC;EAC5C,KAAK,MAAMC,GAAG,IAAIe,GAAG,EAAE;IACrBjB,gBAAgB,CAACC,SAAS,EAAEC,GAAG,CAAC;EAClC;EAEA,OAAO;IACLe,GAAG;IACHa,KAAK,EAAEG,cAAc,CAACK,OAAO,CAAC,CAAC;IAC/BP,mBAAmB,EAAE,CAAC,GAAGK,SAAS;EACpC,CAAC;AACH;AAEA,SAAS4B,oBAAoBA,CAACC,MAAgC,EAAU;EACtE,OAAOd,MAAM,CAACe,OAAO,CAACD,MAAM,CAAC,CAC1BE,GAAG,CAAC,CAAC,CAACC,IAAI,EAAEhB,IAAI,CAAC,KAAK,KAAKL,mBAAI,CAACC,QAAQ,CAACoB,IAAI,CAAC,KAAKhB,IAAI,CAACU,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CACrEA,IAAI,CAAC,IAAI,CAAC;AACf;AAEA,SAASH,sBAAsBA,CAACM,MAAgC,EAAU;EACxE,OAAO,CACL,kEAAkE,EAClE,sFAAsF,EACtF,EAAE,EACFD,oBAAoB,CAACC,MAAM,CAAC,CAC7B,CAACH,IAAI,CAAC,IAAI,CAAC;AACd;AAEA,SAASF,wBAAwBA,CAACK,MAAgC,EAAU;EAC1E,OAAO,CACL,4EAA4E,EAC5E,iCAAiC,EACjC,EAAE,EACFD,oBAAoB,CAACC,MAAM,CAAC,CAC7B,CAACH,IAAI,CAAC,IAAI,CAAC;AACd;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASO,YAAYA,CAC1BxC,QAAkB,EAClB;EACEyC,KAAK;EACLnD,MAAM,GAAG,KAAK;EACdlB,SAAS,GAAGe,OAAO,CAACC;AAMtB,CAAC,GAAG,CAAC,CAAC,EACN;EACA,IAAI,CAACqD,KAAK,IAAIrE,SAAS,CAACY,eAAe,CAAC,EAAE;IACxC,OAAO;MAAE0D,MAAM,EAAE,SAAkB;MAAEC,MAAM,EAAEC,IAAI,CAAC5B,KAAK,CAAC5C,SAAS,CAACY,eAAe,CAAC;IAAE,CAAC;EACvF;EAEA,MAAM6D,MAAM,GAAG9C,aAAa,CAACC,QAAQ,EAAE;IAAE5B;EAAU,CAAC,CAAC;EACrD,MAAM0E,aAAuB,GAAG,EAAE;EAElC,KAAK,MAAMzE,GAAG,IAAIwE,MAAM,CAACzD,GAAG,EAAE;IAC5B,IAAI,OAAOhB,SAAS,CAACC,GAAG,CAAC,KAAK,WAAW,EAAE;MACzCV,KAAK,CAAC,IAAIU,GAAG,6CAA6C,CAAC;IAC7D,CAAC,MAAM;MACLF,gBAAgB,CAACC,SAAS,EAAEC,GAAG,CAAC;MAChCD,SAAS,CAACC,GAAG,CAAC,GAAGwE,MAAM,CAACzD,GAAG,CAACf,GAAG,CAAC;MAChCyE,aAAa,CAACzB,IAAI,CAAChD,GAAG,CAAC;IACzB;EACF;;EAEA;EACAF,gBAAgB,CAACC,SAAS,EAAEY,eAAe,CAAC;EAC5CZ,SAAS,CAACY,eAAe,CAAC,GAAG4D,IAAI,CAACG,SAAS,CAACD,aAAa,CAAC;EAE1D,OAAO;IAAEJ,MAAM,EAAE,QAAiB;IAAE,GAAGG,MAAM;IAAEF,MAAM,EAAEG;EAAc,CAAC;AACxE;;AAEA;AACA;AACA;AACA;AACO,SAASE,eAAeA,CAC7BC,WAAmB,EACnBC,OAAiF,EACjF;EACA,OAAOnD,aAAa,CAClBd,WAAW,CAACiE,OAAO,CAAC,CAACZ,GAAG,CAAE3B,OAAO,IAAKO,mBAAI,CAACe,IAAI,CAACgB,WAAW,EAAEtC,OAAO,CAAC,CAAC,EACtEuC,OACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,cAAcA,CAC5BF,WAAmB,EACnBC,OAAgF,EAChF;EACA,OAAOV,YAAY,CACjBvD,WAAW,CAACiE,OAAO,CAAC,CAACZ,GAAG,CAAE3B,OAAO,IAAKO,mBAAI,CAACe,IAAI,CAACgB,WAAW,EAAEtC,OAAO,CAAC,CAAC,EACtEuC,OACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,cAAcA,CAAChF,SAAoB,GAAGe,OAAO,CAACC,GAAG,EAAa;EAC5E,MAAMsD,MAAiB,GAAG;IAAE,GAAGtE;EAAU,CAAC;EAC1C,MAAMG,MAAM,GAAGN,iBAAiB,CAACO,GAAG,CAACJ,SAAS,CAAC;EAC/C,IAAIG,MAAM,EAAE;IACV,KAAK,MAAM,CAACF,GAAG,EAAEgF,QAAQ,CAAC,IAAI9E,MAAM,EAAE;MACpC,IAAI8E,QAAQ,KAAKC,SAAS,EAAE;QAC1B,OAAOZ,MAAM,CAACrE,GAAG,CAAC;MACpB,CAAC,MAAM;QACLqE,MAAM,CAACrE,GAAG,CAAC,GAAGgF,QAAQ;MACxB;IACF;EACF;EACA,OAAOX,MAAM;AACf;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASa,mBAAmBA,CACjClF,GAAW,EACXD,SAAoB,GAAGe,OAAO,CAACC,GAAG,EACd;EACpB,MAAMb,MAAM,GAAGN,iBAAiB,CAACO,GAAG,CAACJ,SAAS,CAAC;EAC/C,IAAIG,MAAM,IAAIA,MAAM,CAACI,GAAG,CAACN,GAAG,CAAC,EAAE;IAC7B,OAAOE,MAAM,CAACC,GAAG,CAACH,GAAG,CAAC;EACxB;EACA,OAAOD,SAAS,CAACC,GAAG,CAAC;AACvB;;AAEA;AACO,SAASmF,YAAYA,CAC1BC,OAAwC,EACxCP,OAA2C,GAAG,CAAC,CAAC,EAChD;EACA;EACA,IAAIA,OAAO,CAACT,KAAK,IAAIS,OAAO,CAAC5D,MAAM,IAAI,CAACmE,OAAO,CAACd,MAAM,CAACd,MAAM,EAAE,OAAO4B,OAAO;;EAE7E;EACA,IAAIA,OAAO,CAACf,MAAM,KAAK,QAAQ,EAAE;IAC/BlD,sBAAO,CAACkE,GAAG,CACTC,gBAAK,CAACC,IAAI,CAAC,WAAW,EAAEH,OAAO,CAACxD,KAAK,CAACqC,GAAG,CAAEC,IAAI,IAAKrB,mBAAI,CAACC,QAAQ,CAACoB,IAAI,CAAC,CAAC,CAACN,IAAI,CAAC,GAAG,CAAC,CACpF,CAAC;EACH;;EAEA;EACAzC,sBAAO,CAACkE,GAAG,CAACC,gBAAK,CAACC,IAAI,CAAC,aAAa,EAAEH,OAAO,CAACd,MAAM,CAACV,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;;EAEhE;EACA;EACA;EACA,IAAIwB,OAAO,CAACf,MAAM,KAAK,QAAQ,IAAIe,OAAO,CAACvD,mBAAmB,EAAE2B,MAAM,EAAE;IACtErC,sBAAO,CAACkE,GAAG,CAACC,gBAAK,CAACE,MAAM,CAAC,yBAAyB,EAAEJ,OAAO,CAACvD,mBAAmB,CAAC+B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;EAC7F;EAEA,OAAOwB,OAAO;AAChB;;AAEA;;AAEA,IAAIK,IAA6C,GAAG,IAAI;;AAExD;AACA;AACA;AACA;AACA;AACA;AACO,SAAStF,GAAGA,CACjByE,WAAmB,EACnB;EACER,KAAK;EACLnD;AAIF,CAAC,GAAG,CAAC,CAAC,EACN;EACA,IAAI,CAACV,SAAS,CAAC,CAAC,EAAE;IAChBjB,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAO;MAAEyB,GAAG,EAAE,CAAC,CAAC;MAAEa,KAAK,EAAE,EAAE;MAAEC,mBAAmB,EAAE;IAAe,CAAC;EACpE;EACA,IAAIuC,KAAK,IAAI,CAACqB,IAAI,EAAE;IAClBA,IAAI,GAAGd,eAAe,CAACC,WAAW,EAAE;MAAE3D;IAAO,CAAC,CAAC;EACjD;EACA,OAAOwE,IAAI;AACb;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,IAAIA,CAClBd,WAAmB,EACnBC,OAGC,GAAG,CAAC,CAAC,EACN;EACA,IAAI,CAACtE,SAAS,CAAC,CAAC,EAAE;IAChBjB,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAOwB,OAAO,CAACC,GAAG;EACpB;EAEA,MAAMqE,OAAO,GAAGjF,GAAG,CAACyE,WAAW,EAAEC,OAAO,CAAC;EACzC,MAAMJ,aAAuB,GAAG,EAAE;EAElC,KAAK,MAAMzE,GAAG,IAAIoF,OAAO,CAACrE,GAAG,EAAE;IAC7B,IAAI,OAAOD,OAAO,CAACC,GAAG,CAACf,GAAG,CAAC,KAAK,WAAW,EAAE;MAC3CV,KAAK,CAAC,IAAIU,GAAG,6CAA6C,CAAC;IAC7D,CAAC,MAAM;MACL;MACAF,gBAAgB,CAACgB,OAAO,CAACC,GAAG,EAAEf,GAAG,CAAC;MAClCc,OAAO,CAACC,GAAG,CAACf,GAAG,CAAC,GAAGoF,OAAO,CAACrE,GAAG,CAACf,GAAG,CAAC;MACnCyE,aAAa,CAACzB,IAAI,CAAChD,GAAG,CAAC;IACzB;EACF;;EAEA;EACAmF,YAAY,CAAC;IAAE,GAAGC,OAAO;IAAEf,MAAM,EAAE,QAAQ;IAAEC,MAAM,EAAEG;EAAc,CAAC,EAAEI,OAAO,CAAC;EAE9E,OAAO/D,OAAO,CAACC,GAAG;AACpB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS4E,QAAQA,CAAC9E,IAAwB,EAAE;EAAEI,MAAM,GAAG;AAA4B,CAAC,GAAG,CAAC,CAAC,EAAE;EAChG,IAAI,CAACV,SAAS,CAAC,CAAC,EAAE;IAChBjB,KAAK,CAAC,uDAAuD,CAAC;IAC9D,OAAO,EAAE;EACX;EAEA,OAAOsB,WAAW,CAAC;IAAEC,IAAI;IAAEI;EAAO,CAAC,CAAC;AACtC;;AAEA;AACA;AACA;AACO,SAAS2E,QAAQA,CAACC,QAAgB,EAAEC,SAAqB,EAAa;EAC3E,IAAI;IACF,MAAM/E,GAAG,GAAG,IAAA4B,cAAK,EAACkD,QAAQ,CAAC;IAC3B,KAAK,MAAM7F,GAAG,IAAIe,GAAG,EAAE;MACrB,IAAI,IAAAoC,4BAAe,EAACnD,GAAG,CAAC,EAAE;QACxB,OAAOe,GAAG,CAACf,GAAG,CAAC;MACjB;IACF;IACA,OAAO,IAAA6D,eAAM,EAAC9C,GAAG,EAAE+E,SAAS,IAAI,CAAC,CAAC,CAAC;EACrC,CAAC,CAAC,MAAM;IACN,OAAO,CAAC,CAAC;EACX;AACF","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@expo/env",
-  "version": "2.2.2-canary-20260506-03817f5",
+  "version": "2.3.0",
   "description": "hydrate environment variables from .env files into process.env",
   "main": "build/index.js",
   "repository": {
@@ -29,12 +29,12 @@
     "@babel/cli": "^7.23.4",
     "@types/debug": "^4.1.7",
     "@types/getenv": "^1.0.0",
-    "expo-module-scripts": "56.0.1"
+    "expo-module-scripts": "56.0.2"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "03817f532b50afebd227eb8eb15ede60fdbb4c6b",
+  "gitHead": "c4c9867a0bcbb188e55ecaec4998e38d33108a5d",
   "scripts": {
     "build": "tsc --emitDeclarationOnly && babel src --out-dir build --extensions \".ts\" --source-maps --ignore \"src/**/__mocks__/*\",\"src/**/__tests__/*\"",
     "clean": "expo-module clean",