@modootoday/envs 0.1.1 → 0.2.0

package/README.md

@@ -61,14 +61,14 @@ used it, most of this is already familiar.
 
 ## Documentation
 
-| | |
-| --- | --- |
-| Getting started | <https://envs.build/guide/> |
-| The format rule, measured against dotenv | <https://envs.build/format/> |
-| Recovery codes | <https://envs.build/recovery/> |
-| How it compares to dotenv, dotenvx, Doppler and Infisical | <https://envs.build/compare/> |
-| Sharing a catalog, and what the server cannot see | <https://envs.build/hosted/> |
-| All 28 commands | <https://envs.build/commands/> |
+|                                                           |                                |
+| --------------------------------------------------------- | ------------------------------ |
+| Getting started                                           | <https://envs.build/guide/>    |
+| The format rule, measured against dotenv                  | <https://envs.build/format/>   |
+| Recovery codes                                            | <https://envs.build/recovery/> |
+| How it compares to dotenv, dotenvx, Doppler and Infisical | <https://envs.build/compare/>  |
+| Sharing a catalog, and what the server cannot see         | <https://envs.build/hosted/>   |
+| All 28 commands                                           | <https://envs.build/commands/> |
 
 ## Requirements
 

package/dist/{chunk-NQHT5UCU.js → chunk-GPWDRKCY.js}

@@ -264,7 +264,7 @@ function printHelp(ui, commands, notImplemented) {
 }
 
 // src/cli/version.ts
-var VERSION = true ? "0.1.1" : "0.0.0-source";
+var VERSION = true ? "0.2.0" : "0.0.0-source";
 
 // src/commands/add.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
@@ -2527,6 +2527,62 @@ function conflicts(entries) {
   }
   return findings;
 }
+var MIN_TWIN_LENGTH = 12;
+function twins(entries) {
+  const byValue = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    if (entry.value.length < MIN_TWIN_LENGTH) continue;
+    byValue.set(entry.value, [...byValue.get(entry.value) ?? [], entry]);
+  }
+  const findings = [];
+  const reported = /* @__PURE__ */ new Set();
+  for (const group of byValue.values()) {
+    const names = [...new Set(group.map((entry) => entry.key))].sort();
+    if (names.length < 2) continue;
+    const pair = names.join(" and ");
+    if (reported.has(pair)) continue;
+    reported.add(pair);
+    findings.push({
+      level: "warn",
+      what: names[0],
+      // The value is never printed, here least of all: the finding is that one
+      // secret is in two places, and naming both places is the whole answer.
+      detail: `holds the same value as ${names.slice(1).join(", ")} \u2014 one secret in two names, free to drift apart`
+    });
+  }
+  return findings;
+}
+function exampleDrift(root, keys) {
+  const findings = [];
+  const known = new Set(keys);
+  for (const [file, parse] of [
+    [".env.example", (text) => namesFromEnv(text)],
+    ["envs.requires", (text) => namesFromList(text)]
+  ]) {
+    const path = join3(root, file);
+    if (!existsSync10(path)) continue;
+    const listed = new Set(parse(readFileSync7(path, "utf8")));
+    const missing = [...known].filter((key) => !listed.has(key)).sort();
+    const stale = [...listed].filter((key) => !known.has(key)).sort();
+    if (missing.length > 0) {
+      findings.push({
+        level: "warn",
+        what: file,
+        detail: `does not list ${missing.join(", ")} \u2014 someone starting from it begins short`
+      });
+    }
+    if (stale.length > 0) {
+      findings.push({
+        level: "warn",
+        what: file,
+        detail: `still lists ${stale.join(", ")} \u2014 nothing reads those now`
+      });
+    }
+  }
+  return findings;
+}
+var namesFromEnv = (text) => text.split("\n").map((line) => /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line)).filter((match) => match !== null).map((match) => match[1]);
+var namesFromList = (text) => text.split("\n").map((line) => line.trim()).filter((line) => line !== "" && !line.startsWith("#"));
 function globalOnly(entries) {
   const inProject = new Set(
     entries.filter((e) => e.layer === "project").map((e) => e.key)
@@ -2718,6 +2774,11 @@ var doctorCommand = {
     const findings = [
       ...catalogIgnored(located.project, located.projectRoot),
       ...conflicts(entries),
+      ...twins(entries),
+      ...exampleDrift(
+        located.projectRoot ?? cwd,
+        entries.map((entry) => entry.key)
+      ),
       ...globalOnly(entries),
       ...ghosts(entries),
       ...templateFindings(

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   dispatch
-} from "./chunk-NQHT5UCU.js";
+} from "./chunk-GPWDRKCY.js";
 import "./chunk-STHFIZRP.js";
 
 // src/cli.ts

package/dist/index.cjs

@@ -1574,7 +1574,7 @@ function printHelp(ui, commands, notImplemented) {
 }
 
 // src/cli/version.ts
-var VERSION = true ? "0.1.1" : "0.0.0-source";
+var VERSION = true ? "0.2.0" : "0.0.0-source";
 
 // src/commands/add.ts
 var import_node_fs5 = require("fs");
@@ -3811,6 +3811,62 @@ function conflicts(entries) {
   }
   return findings;
 }
+var MIN_TWIN_LENGTH = 12;
+function twins(entries) {
+  const byValue = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    if (entry.value.length < MIN_TWIN_LENGTH) continue;
+    byValue.set(entry.value, [...byValue.get(entry.value) ?? [], entry]);
+  }
+  const findings = [];
+  const reported = /* @__PURE__ */ new Set();
+  for (const group of byValue.values()) {
+    const names = [...new Set(group.map((entry) => entry.key))].sort();
+    if (names.length < 2) continue;
+    const pair = names.join(" and ");
+    if (reported.has(pair)) continue;
+    reported.add(pair);
+    findings.push({
+      level: "warn",
+      what: names[0],
+      // The value is never printed, here least of all: the finding is that one
+      // secret is in two places, and naming both places is the whole answer.
+      detail: `holds the same value as ${names.slice(1).join(", ")} \u2014 one secret in two names, free to drift apart`
+    });
+  }
+  return findings;
+}
+function exampleDrift(root, keys) {
+  const findings = [];
+  const known = new Set(keys);
+  for (const [file, parse] of [
+    [".env.example", (text) => namesFromEnv(text)],
+    ["envs.requires", (text) => namesFromList(text)]
+  ]) {
+    const path = (0, import_node_path7.join)(root, file);
+    if (!(0, import_node_fs15.existsSync)(path)) continue;
+    const listed = new Set(parse((0, import_node_fs15.readFileSync)(path, "utf8")));
+    const missing = [...known].filter((key) => !listed.has(key)).sort();
+    const stale = [...listed].filter((key) => !known.has(key)).sort();
+    if (missing.length > 0) {
+      findings.push({
+        level: "warn",
+        what: file,
+        detail: `does not list ${missing.join(", ")} \u2014 someone starting from it begins short`
+      });
+    }
+    if (stale.length > 0) {
+      findings.push({
+        level: "warn",
+        what: file,
+        detail: `still lists ${stale.join(", ")} \u2014 nothing reads those now`
+      });
+    }
+  }
+  return findings;
+}
+var namesFromEnv = (text) => text.split("\n").map((line) => /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line)).filter((match) => match !== null).map((match) => match[1]);
+var namesFromList = (text) => text.split("\n").map((line) => line.trim()).filter((line) => line !== "" && !line.startsWith("#"));
 function globalOnly(entries) {
   const inProject = new Set(
     entries.filter((e) => e.layer === "project").map((e) => e.key)
@@ -4002,6 +4058,11 @@ var doctorCommand = {
     const findings = [
       ...catalogIgnored(located.project, located.projectRoot),
       ...conflicts(entries),
+      ...twins(entries),
+      ...exampleDrift(
+        located.projectRoot ?? cwd,
+        entries.map((entry) => entry.key)
+      ),
       ...globalOnly(entries),
       ...ghosts(entries),
       ...templateFindings(

package/dist/index.js

@@ -5,7 +5,7 @@ import {
   csvField,
   dispatch,
   exportValues
-} from "./chunk-NQHT5UCU.js";
+} from "./chunk-GPWDRKCY.js";
 import {
   CatalogVersionError,
   ConflictError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modootoday/envs",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "license": "Elastic-2.0",
   "author": "modootoday",
   "description": "Environment values in an encrypted catalog rather than scattered files — provenance, releases, rollback and a strict .env format gate. dotenv-compatible surface.",