@puristic/env 0.1.0 → 1.1.0

package/README.md

@@ -0,0 +1,85 @@
+# @puristic/env
+
+**Type-safe configuration whose one Zod schema is the single source of truth — for runtime loading, CI validation, codegen, and a [VSCode editor](https://github.com/radarsu/puristic-env/tree/main/_libs/vscode).**
+
+`@puristic/env` loads configuration by merging CLI flags, environment variables, and `.env` files with predictable precedence, validating them against a [Zod](https://zod.dev) schema, and decrypting any secrets — all driven by the *real* TypeScript schema your app already imports, not a separate DSL or a cloud API. The same definition powers the [`purenv` CLI](https://www.npmjs.com/package/@puristic/env-cli) and the VSCode extension, so they can never drift.
+
+## Install
+
+```sh
+pnpm add @puristic/env   # or: npm i @puristic/env
+```
+
+Requires **Node 24+** and `zod` v4.
+
+## Quickstart
+
+Define your configuration once and export the **raw `ConfigDefinition`** (schema + sources) — not `loadConfig(...)`, which loads immediately and would fail on encrypted secrets without a key:
+
+```ts
+// env.config.ts — the single source of truth
+import { type ConfigDefinition, envFile, env, cliArgs } from "@puristic/env/index.js";
+import { z } from "zod";
+
+export default {
+    schema: z.object({
+        nodeEnv: z.string(),
+        server: z.object({
+            port: z.coerce.number().int(),
+            host: z.string().default("0.0.0.0"),
+        }),
+        database: z.object({
+            url: z.url().meta({ secret: true }),
+        }),
+    }),
+    sources: [envFile(".env"), env(), cliArgs()], // later sources win: CLI > env > .env file
+} satisfies ConfigDefinition<z.ZodType>;
+```
+
+Load it at runtime — validated, secrets decrypted, deep-frozen:
+
+```ts
+import { loadConfig } from "@puristic/env/index.js";
+import definition from "./env.config.js";
+
+const config = loadConfig(definition);
+config.server.port; // number
+```
+
+Use `createConfig(definition)` instead when you want a handle: call `.load()` once in your bootstrap, then `.get()` anywhere (it throws if accessed before `load()`).
+
+Nested schema paths map to env var names by core's rule — `["server", "httpsPort"]` → `SERVER_HTTPS_PORT` (and `--server-https-port` for CLI flags):
+
+```sh
+# .env
+NODE_ENV=production
+SERVER_PORT=8080
+DATABASE_URL=encrypted:v1:…        # secret — encrypted in place
+```
+
+## API
+
+| Export | Purpose |
+| --- | --- |
+| `loadConfig` / `createConfig` | Load + validate + decrypt + deep-freeze (one-call, or a `load`/`get` handle) |
+| `envFile` · `env` · `cliArgs` | Built-in sources, merged left-to-right with last-source-wins precedence |
+| `extractDefinition` / `loadDefinition` | Resolve a `ConfigDefinition` from an imported / on-disk `env.config.*` |
+| `inspectSchema` · `validateValues` · `classify` | Schema introspection, per-leaf validation, and the shared OK / Missing / Invalid / Unknown / secret status model |
+| `encrypt` · `decrypt` · `generateKeypair` | Post-quantum secret encryption (ML-KEM-512 + AES-256-GCM) |
+| `generateDts` · `generateEnvExample` · `generateJsonSchema` | Codegen from the schema (typed `process.env`, `.env.example`, JSON Schema) |
+| `parseEnv` · `serializeEnv` · `setValue` … | Round-trip `.env` editing that preserves comments, order, quoting, and `export` prefixes |
+| `expandEnv` / `expandValue` | `$VAR` / `${VAR}` expansion against sibling values and the ambient environment |
+
+## Secrets
+
+Mark a field secret with `.meta({ secret: true })`. Its value is encrypted **in place** with the project's public key (`.config/purenv-pub.key`) into an `encrypted:v1:…` envelope using **ML-KEM-512** (a post-quantum KEM) + **AES-256-GCM**. Encryption needs only the public key; loading/decrypting needs the private key. It is fully local — no cloud account. Generate a keypair with `purenv keygen`.
+
+## Learn more
+
+- **[Full project README](https://github.com/radarsu/puristic-env#readme)** — overview, security model, and getting started
+- **[`@puristic/env-cli`](https://www.npmjs.com/package/@puristic/env-cli)** — the `purenv` command line
+- **[VSCode extension](https://github.com/radarsu/puristic-env/tree/main/_libs/vscode)** — the schema-driven `.env` editor
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -9,14 +9,13 @@ export { encrypt } from "./crypto/encrypt.js";
 export { ENVELOPE_PREFIX, isEnvelope } from "./crypto/format.js";
 export { generateKeypair, type Keypair } from "./crypto/keygen.js";
 export { type DecryptOptions, defaultPrivateKeyPath, PUBLIC_KEY_PATH, resolvePrivateKey, resolveProjectName, resolvePublicKey, } from "./crypto/resolveKey.js";
-export { defineConfig } from "./defineConfig.js";
 export { associateConfigs } from "./discovery/associate.js";
 export { groupByDirectory } from "./discovery/groupByDirectory.js";
 export { baseName, dirOf, isAncestorOrSame } from "./discovery/paths.js";
 export { addKey, type EnvDocument, type EnvLine, getValue, listEntries, parseEnv, type QuoteStyle, removeKey, serializeEnv, setValue, } from "./envText.js";
 export { expandEnv, expandValue } from "./expandEnv.js";
 export { inspectSchema, type LeafConstraint, type LeafDescriptorPublic, type LeafTypeTag } from "./inspectSchema.js";
-export { extractDefinition, loadDefinition } from "./loadConfig.js";
+export { extractDefinition, loadConfig, loadDefinition } from "./loadConfig.js";
 export type { Source, SourceContext } from "./source.js";
 export { type CliArgsOptions, cliArgs } from "./sources/cliArgs.js";
 export { type EnvOptions, env } from "./sources/env.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,KAAK,cAAc,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACH,KAAK,cAAc,EACnB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACH,MAAM,EACN,KAAK,WAAW,EAChB,KAAK,OAAO,EACZ,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,KAAK,UAAU,EACf,SAAS,EACT,YAAY,EACZ,QAAQ,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,oBAAoB,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,KAAK,cAAc,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,KAAK,UAAU,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,KAAK,cAAc,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACH,KAAK,cAAc,EACnB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACH,MAAM,EACN,KAAK,WAAW,EAChB,KAAK,OAAO,EACZ,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,KAAK,UAAU,EACf,SAAS,EACT,YAAY,EACZ,QAAQ,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,oBAAoB,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,KAAK,cAAc,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,KAAK,UAAU,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -9,14 +9,13 @@ export { encrypt } from "./crypto/encrypt.js";
 export { ENVELOPE_PREFIX, isEnvelope } from "./crypto/format.js";
 export { generateKeypair } from "./crypto/keygen.js";
 export { defaultPrivateKeyPath, PUBLIC_KEY_PATH, resolvePrivateKey, resolveProjectName, resolvePublicKey, } from "./crypto/resolveKey.js";
-export { defineConfig } from "./defineConfig.js";
 export { associateConfigs } from "./discovery/associate.js";
 export { groupByDirectory } from "./discovery/groupByDirectory.js";
 export { baseName, dirOf, isAncestorOrSame } from "./discovery/paths.js";
 export { addKey, getValue, listEntries, parseEnv, removeKey, serializeEnv, setValue, } from "./envText.js";
 export { expandEnv, expandValue } from "./expandEnv.js";
 export { inspectSchema } from "./inspectSchema.js";
-export { extractDefinition, loadDefinition } from "./loadConfig.js";
+export { extractDefinition, loadConfig, loadDefinition } from "./loadConfig.js";
 export { cliArgs } from "./sources/cliArgs.js";
 export { env } from "./sources/env.js";
 export { envFile } from "./sources/envFile.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2C,QAAQ,EAAkB,MAAM,eAAe,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAuB,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAA4C,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAgB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAEH,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACH,MAAM,EAGN,QAAQ,EACR,WAAW,EACX,QAAQ,EAER,SAAS,EACT,YAAY,EACZ,QAAQ,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAoE,MAAM,oBAAoB,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAuB,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAmB,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAA8C,cAAc,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2C,QAAQ,EAAkB,MAAM,eAAe,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAuB,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAA4C,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAgB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAEH,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACH,MAAM,EAGN,QAAQ,EACR,WAAW,EACX,QAAQ,EAER,SAAS,EACT,YAAY,EACZ,QAAQ,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAoE,MAAM,oBAAoB,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEhF,OAAO,EAAuB,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAmB,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAA8C,cAAc,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/loadConfig.d.ts

@@ -1,5 +1,6 @@
 import type { z } from "zod";
-import type { ConfigDefinition } from "./createConfig.js";
+import { type ConfigDefinition } from "./createConfig.js";
+export declare function loadConfig<S extends z.ZodType>(definition: ConfigDefinition<S>): z.infer<S>;
 export declare function extractDefinition(module: Record<string, unknown>): ConfigDefinition<z.ZodType>;
 export declare function loadDefinition(configPath: string): Promise<ConfigDefinition<z.ZodType>>;
 //# sourceMappingURL=loadConfig.d.ts.map

package/dist/loadConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loadConfig.d.ts","sourceRoot":"","sources":["../src/loadConfig.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAK1D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAe9F;AAID,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAG7F"}
+{"version":3,"file":"loadConfig.d.ts","sourceRoot":"","sources":["../src/loadConfig.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,gBAAgB,EAAgB,MAAM,mBAAmB,CAAC;AAexE,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAE3F;AAKD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAe9F;AAID,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAG7F"}

package/dist/loadConfig.js

@@ -1,4 +1,8 @@
 import { pathToFileURL } from "node:url";
+import { createConfig } from "./createConfig.js";
+export function loadConfig(definition) {
+    return createConfig(definition).load();
+}
 export function extractDefinition(module) {
     const candidate = module["default"] ?? module["config"] ?? module["definition"];
     if (isDefinition(candidate)) {

package/dist/loadConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"loadConfig.js","sourceRoot":"","sources":["../src/loadConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAOzC,MAAM,UAAU,iBAAiB,CAAC,MAA+B;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,KAAK,CACX,gIAAgI,CACnI,CAAC;AACN,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB;IACnD,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAA4B,CAAC;IACzF,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,CAAE,KAA8B,CAAC,MAAM,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,IAAI,KAAK,IAAI,OAAQ,KAAiC,CAAC,SAAS,KAAK,UAAU,CAAC;AACjG,CAAC"}
+{"version":3,"file":"loadConfig.js","sourceRoot":"","sources":["../src/loadConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAyB,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAexE,MAAM,UAAU,UAAU,CAAsB,UAA+B;IAC3E,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAKD,MAAM,UAAU,iBAAiB,CAAC,MAA+B;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,KAAK,CACX,gIAAgI,CACnI,CAAC;AACN,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB;IACnD,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAA4B,CAAC;IACzF,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,CAAE,KAA8B,CAAC,MAAM,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,IAAI,KAAK,IAAI,OAAQ,KAAiC,CAAC,SAAS,KAAK,UAAU,CAAC;AACjG,CAAC"}

package/package.json

@@ -1,6 +1,26 @@
 {
   "name": "@puristic/env",
-  "version": "0.1.0",
+  "version": "1.1.0",
+  "description": "Type-safe configuration loader: one real Zod schema drives runtime loading, validation, codegen, and post-quantum encrypted secrets — no DSL, no cloud.",
+  "keywords": [
+    "env",
+    "dotenv",
+    "dotenvx",
+    "varlock",
+    "environment-variables",
+    "env-vars",
+    "config",
+    "configuration",
+    "zod",
+    "schema",
+    "validation",
+    "type-safe",
+    "typescript",
+    "secrets",
+    "encryption",
+    "post-quantum",
+    "12-factor"
+  ],
   "license": "MIT",
   "type": "module",
   "repository": {

package/dist/defineConfig.d.ts

@@ -1,4 +0,0 @@
-import type { z } from "zod";
-import { type ConfigDefinition } from "./createConfig.js";
-export declare function defineConfig<S extends z.ZodType>(definition: ConfigDefinition<S>): z.infer<S>;
-//# sourceMappingURL=defineConfig.d.ts.map

package/dist/defineConfig.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"defineConfig.d.ts","sourceRoot":"","sources":["../src/defineConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,gBAAgB,EAAgB,MAAM,mBAAmB,CAAC;AAExE,wBAAgB,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAE7F"}

package/dist/defineConfig.js

@@ -1,5 +0,0 @@
-import { createConfig } from "./createConfig.js";
-export function defineConfig(definition) {
-    return createConfig(definition).load();
-}
-//# sourceMappingURL=defineConfig.js.map

package/dist/defineConfig.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"defineConfig.js","sourceRoot":"","sources":["../src/defineConfig.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAExE,MAAM,UAAU,YAAY,CAAsB,UAA+B;IAC7E,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC"}