@push.rocks/qenv 7.0.0 → 8.0.0

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/qenv',
-    version: '7.0.0',
+    version: '8.0.0',
     description: 'A module for easily handling environment variables in Node.js projects with support for .yml and .json configuration.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxrQkFBa0I7SUFDeEIsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHVIQUF1SDtDQUNySSxDQUFBIn0=

package/dist_ts/index.d.ts

@@ -1 +1,2 @@
 export * from './qenv.classes.qenv.js';
+export * from './qenv.classes.missingrequiredenvvarserror.js';

package/dist_ts/index.js

@@ -1,2 +1,3 @@
 export * from './qenv.classes.qenv.js';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxjQUFjLHdCQUF3QixDQUFDIn0=
+export * from './qenv.classes.missingrequiredenvvarserror.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxjQUFjLHdCQUF3QixDQUFDO0FBQ3ZDLGNBQWMsK0NBQStDLENBQUMifQ==

package/dist_ts/qenv.classes.missingrequiredenvvarserror.d.ts

@@ -0,0 +1,18 @@
+export interface IQenvMissingRequiredEnvVarsErrorOptions {
+    missingEnvVars: string[];
+    requiredEnvVars: string[];
+    qenvFilePathAbsolute: string;
+}
+/**
+ * Thrown when a variable listed under `required:` in qenv.yml is not provided by any source.
+ * The names are carried as data so a caller can report or branch on them without parsing the
+ * message, and `code` identifies the refusal even when two copies of qenv end up in one tree,
+ * which makes `instanceof` unreliable.
+ */
+export declare class QenvMissingRequiredEnvVarsError extends Error {
+    readonly code = "QENV_MISSING_REQUIRED_ENV_VARS";
+    readonly missingEnvVars: string[];
+    readonly requiredEnvVars: string[];
+    readonly qenvFilePathAbsolute: string;
+    constructor(optionsArg: IQenvMissingRequiredEnvVarsErrorOptions);
+}

package/dist_ts/qenv.classes.missingrequiredenvvarserror.js

@@ -0,0 +1,19 @@
+/**
+ * Thrown when a variable listed under `required:` in qenv.yml is not provided by any source.
+ * The names are carried as data so a caller can report or branch on them without parsing the
+ * message, and `code` identifies the refusal even when two copies of qenv end up in one tree,
+ * which makes `instanceof` unreliable.
+ */
+export class QenvMissingRequiredEnvVarsError extends Error {
+    constructor(optionsArg) {
+        super(`qenv is missing required environment variables: ${optionsArg.missingEnvVars.join(', ')}. ` +
+            `They are listed under "required:" in ${optionsArg.qenvFilePathAbsolute} and were found ` +
+            `neither in the process environment, nor in the env file, nor in the Docker secrets.`);
+        this.code = 'QENV_MISSING_REQUIRED_ENV_VARS';
+        this.name = 'QenvMissingRequiredEnvVarsError';
+        this.missingEnvVars = [...optionsArg.missingEnvVars];
+        this.requiredEnvVars = [...optionsArg.requiredEnvVars];
+        this.qenvFilePathAbsolute = optionsArg.qenvFilePathAbsolute;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicWVudi5jbGFzc2VzLm1pc3NpbmdyZXF1aXJlZGVudnZhcnNlcnJvci5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzL3FlbnYuY2xhc3Nlcy5taXNzaW5ncmVxdWlyZWRlbnZ2YXJzZXJyb3IudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBTUE7Ozs7O0dBS0c7QUFDSCxNQUFNLE9BQU8sK0JBQWdDLFNBQVEsS0FBSztJQU14RCxZQUFZLFVBQW1EO1FBQzdELEtBQUssQ0FDSCxtREFBbUQsVUFBVSxDQUFDLGNBQWMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLElBQUk7WUFDekYsd0NBQXdDLFVBQVUsQ0FBQyxvQkFBb0Isa0JBQWtCO1lBQ3pGLHFGQUFxRixDQUN4RixDQUFDO1FBVlksU0FBSSxHQUFHLGdDQUFnQyxDQUFDO1FBV3RELElBQUksQ0FBQyxJQUFJLEdBQUcsaUNBQWlDLENBQUM7UUFDOUMsSUFBSSxDQUFDLGNBQWMsR0FBRyxDQUFDLEdBQUcsVUFBVSxDQUFDLGNBQWMsQ0FBQyxDQUFDO1FBQ3JELElBQUksQ0FBQyxlQUFlLEdBQUcsQ0FBQyxHQUFHLFVBQVUsQ0FBQyxlQUFlLENBQUMsQ0FBQztRQUN2RCxJQUFJLENBQUMsb0JBQW9CLEdBQUcsVUFBVSxDQUFDLG9CQUFvQixDQUFDO0lBQzlELENBQUM7Q0FDRiJ9

package/dist_ts/qenv.classes.qenv.d.ts

@@ -1,32 +1,71 @@
 import * as plugins from './qenv.plugins.js';
+/**
+ * a reference to an environment variable: its name, or an async function that produces the value.
+ * The function form is only honoured by the async getters; the synchronous getter accepts names.
+ */
 export type TEnvVarRef = string | (() => Promise<string>);
-type TKeyValueObject = Record<string, any>;
+/** the resolved value of every available required env var, always a string */
+export type TEnvVarValueMap = Record<string, string>;
 export declare class Qenv {
+    /** the names listed under `required:` in qenv.yml */
     requiredEnvVars: string[];
+    /** the required names that a source provided */
     availableEnvVars: string[];
+    /** the required names that no source provided */
     missingEnvVars: string[];
-    keyValueObject: TKeyValueObject;
+    /** the resolved value of every available required name */
+    keyValueObject: TEnvVarValueMap;
     logger: plugins.smartlog.ConsoleLog;
     qenvFilePathAbsolute: string;
     envFilePathAbsolute?: string;
+    /**
+     * Resolves every name listed under `required:` in qenv.yml while constructing.
+     * @param qenvFileBasePathArg directory that holds qenv.yml
+     * @param envFileBasePathArg directory that holds env.json, env.yml or env.yaml
+     * @param failOnMissing throws a QenvMissingRequiredEnvVarsError when a variable listed under
+     * `required:` in qenv.yml is not provided by any source. Pass false to only record the names in
+     * `missingEnvVars` and continue.
+     * @throws QenvMissingRequiredEnvVarsError
+     */
     constructor(qenvFileBasePathArg?: string, envFileBasePathArg?: string, failOnMissing?: boolean);
     private initializeFilePaths;
     private loadRequiredEnvVars;
     private loadAvailableEnvVars;
     private checkForMissingEnvVars;
+    /**
+     * Resolves an env var from the process environment, the env file and the Docker secrets, in that
+     * order. An array is tried left to right and the first defined value wins.
+     * @param envVarNameOrNames a name, an async resolver function, or a list of either
+     */
     getEnvVarOnDemand(envVarNameOrNames: TEnvVarRef | TEnvVarRef[]): Promise<string | undefined>;
     /**
-     * Like getEnvVarOnDemand, but throws an error if the env var is not set.
-     * @param envVarNameOrNames
-     * @returns
+     * Like getEnvVarOnDemand, but throws when no source provides a value.
+     * @param envVarNameOrNames a name, an async resolver function, or a list of either
      */
     getEnvVarOnDemandStrict(envVarNameOrNames: TEnvVarRef | TEnvVarRef[]): Promise<string>;
+    /**
+     * The synchronous counterpart of getEnvVarOnDemand. It resolves names only: an async resolver
+     * function cannot be awaited here, so the function form of TEnvVarRef is not accepted.
+     * @param envVarNameOrNames a name or a list of names
+     */
     getEnvVarOnDemandSync(envVarNameOrNames: string | string[]): string | undefined;
-    getEnvVarOnDemandAsObject(envVarNameOrNames: string | string[]): Promise<any>;
+    /**
+     * Resolves an env var whose value was stored as a base64 encoded object and decodes it. A plain
+     * value is returned as the string it is, so the caller narrows what it gets.
+     * @param envVarNameOrNames a name or a list of names
+     */
+    getEnvVarOnDemandAsObject(envVarNameOrNames: string | string[]): Promise<unknown>;
     private tryGetEnvVar;
     private tryGetEnvVarSync;
+    /** renders env var references for an error message, naming a resolver function where it has one */
+    private describeEnvVarRefs;
     private getFromEnvironmentVariable;
     private getFromEnvYamlOrJsonFile;
+    /**
+     * the directory Docker mounts secrets into. It is a method so a test can point both secret
+     * readers at a directory it is allowed to create; a process can never write /run/secrets itself.
+     */
+    protected getDockerSecretsDirectoryPath(): string;
     private getFromDockerSecret;
     private getFromDockerSecretJson;
     private encodeBase64;
@@ -35,4 +74,3 @@ export declare class Qenv {
     private directoryExists;
     private readObjectFromFile;
 }
-export {};

package/dist_ts/qenv.classes.qenv.js

@@ -1,9 +1,23 @@
 import * as plugins from './qenv.plugins.js';
+import { QenvMissingRequiredEnvVarsError } from './qenv.classes.missingrequiredenvvarserror.js';
 export class Qenv {
+    /**
+     * Resolves every name listed under `required:` in qenv.yml while constructing.
+     * @param qenvFileBasePathArg directory that holds qenv.yml
+     * @param envFileBasePathArg directory that holds env.json, env.yml or env.yaml
+     * @param failOnMissing throws a QenvMissingRequiredEnvVarsError when a variable listed under
+     * `required:` in qenv.yml is not provided by any source. Pass false to only record the names in
+     * `missingEnvVars` and continue.
+     * @throws QenvMissingRequiredEnvVarsError
+     */
     constructor(qenvFileBasePathArg = process.cwd(), envFileBasePathArg, failOnMissing = true) {
+        /** the names listed under `required:` in qenv.yml */
         this.requiredEnvVars = [];
+        /** the required names that a source provided */
         this.availableEnvVars = [];
+        /** the required names that no source provided */
         this.missingEnvVars = [];
+        /** the resolved value of every available required name */
         this.keyValueObject = {};
         this.logger = new plugins.smartlog.ConsoleLog();
         this.qenvFilePathAbsolute = '';
@@ -38,20 +52,25 @@ export class Qenv {
         }
     }
     loadRequiredEnvVars() {
-        if (this.fileExists(this.qenvFilePathAbsolute)) {
-            const qenvFile = this.readObjectFromFile(this.qenvFilePathAbsolute);
-            const requiredEnvVars = qenvFile.required;
-            if (Array.isArray(requiredEnvVars)) {
-                this.requiredEnvVars.push(...requiredEnvVars.filter((envVar) => typeof envVar === 'string'));
-            }
-            else {
-                this.logger.log('warn', 'qenv.yml does not contain a "required" Array!');
-            }
+        if (!this.fileExists(this.qenvFilePathAbsolute)) {
+            return;
         }
+        const qenvFile = this.readObjectFromFile(this.qenvFilePathAbsolute);
+        const declaredRequirements = qenvFile['required'];
+        if (!Array.isArray(declaredRequirements)) {
+            this.logger.log('warn', 'qenv.yml does not contain a "required" Array!');
+            return;
+        }
+        const declaredEntries = declaredRequirements;
+        this.requiredEnvVars.push(...declaredEntries.filter((entry) => typeof entry === 'string'));
     }
     loadAvailableEnvVars() {
+        // resolved synchronously: a required env var is always a name, and every source a name can come
+        // from - process environment, env file, Docker secrets - is a synchronous read. Resolving it
+        // here as a promise would store a pending promise instead of a value and make the check below
+        // pass for every name.
         for (const envVar of this.requiredEnvVars) {
-            const value = this.getEnvVarOnDemand(envVar);
+            const value = this.tryGetEnvVarSync(envVar);
             if (value !== undefined) {
                 this.availableEnvVars.push(envVar);
                 this.keyValueObject[envVar] = value;
@@ -60,18 +79,24 @@ export class Qenv {
     }
     checkForMissingEnvVars(failOnMissing) {
         this.missingEnvVars = this.requiredEnvVars.filter((envVar) => !this.availableEnvVars.includes(envVar));
-        if (this.missingEnvVars.length > 0) {
-            console.info('Required Env Vars are:', this.requiredEnvVars);
-            console.error('Missing Env Vars:', this.missingEnvVars);
-            if (failOnMissing) {
-                this.logger.log('error', 'Exiting due to missing env vars!');
-                process.exit(1);
-            }
-            else {
-                this.logger.log('warn', 'qenv is not set to fail on missing environment variables');
-            }
+        if (this.missingEnvVars.length === 0) {
+            return;
         }
+        if (failOnMissing) {
+            // a library must not end the process: the caller decides what an incomplete environment means
+            throw new QenvMissingRequiredEnvVarsError({
+                missingEnvVars: this.missingEnvVars,
+                requiredEnvVars: this.requiredEnvVars,
+                qenvFilePathAbsolute: this.qenvFilePathAbsolute,
+            });
+        }
+        this.logger.log('warn', `qenv is not set to fail on missing environment variables. Missing: ${this.missingEnvVars.join(', ')}`);
     }
+    /**
+     * Resolves an env var from the process environment, the env file and the Docker secrets, in that
+     * order. An array is tried left to right and the first defined value wins.
+     * @param envVarNameOrNames a name, an async resolver function, or a list of either
+     */
     async getEnvVarOnDemand(envVarNameOrNames) {
         if (Array.isArray(envVarNameOrNames)) {
             for (const envVarName of envVarNameOrNames) {
@@ -87,19 +112,22 @@ export class Qenv {
         }
     }
     /**
-     * Like getEnvVarOnDemand, but throws an error if the env var is not set.
-     * @param envVarNameOrNames
-     * @returns
+     * Like getEnvVarOnDemand, but throws when no source provides a value.
+     * @param envVarNameOrNames a name, an async resolver function, or a list of either
      */
     async getEnvVarOnDemandStrict(envVarNameOrNames) {
         const value = await this.getEnvVarOnDemand(envVarNameOrNames);
         if (value === undefined) {
-            throw new Error(`Env var ${envVarNameOrNames} is not set!`);
+            throw new Error(`Env var ${this.describeEnvVarRefs(envVarNameOrNames)} is not set!`);
         }
         return value;
     }
+    /**
+     * The synchronous counterpart of getEnvVarOnDemand. It resolves names only: an async resolver
+     * function cannot be awaited here, so the function form of TEnvVarRef is not accepted.
+     * @param envVarNameOrNames a name or a list of names
+     */
     getEnvVarOnDemandSync(envVarNameOrNames) {
-        console.warn('requesting env var sync leaves out potentially important async env sources.');
         if (Array.isArray(envVarNameOrNames)) {
             for (const envVarName of envVarNameOrNames) {
                 const value = this.tryGetEnvVarSync(envVarName);
@@ -113,6 +141,11 @@ export class Qenv {
             return this.tryGetEnvVarSync(envVarNameOrNames);
         }
     }
+    /**
+     * Resolves an env var whose value was stored as a base64 encoded object and decodes it. A plain
+     * value is returned as the string it is, so the caller narrows what it gets.
+     * @param envVarNameOrNames a name or a list of names
+     */
     async getEnvVarOnDemandAsObject(envVarNameOrNames) {
         const rawValue = await this.getEnvVarOnDemand(envVarNameOrNames);
         if (rawValue && rawValue.startsWith('base64Object:')) {
@@ -125,33 +158,36 @@ export class Qenv {
         if (typeof envVarRefArg === 'function') {
             return await envVarRefArg();
         }
-        const sources = [
-            this.getFromEnvironmentVariable(envVarRefArg),
-            this.getFromEnvYamlOrJsonFile(envVarRefArg),
-            this.getFromDockerSecret(envVarRefArg),
-            this.getFromDockerSecretJson(envVarRefArg)
-        ];
-        for (const value of sources) {
-            if (value !== undefined) {
-                return value;
-            }
-        }
-        return undefined;
+        // a name resolves from synchronous sources only, so both getters share one resolution order
+        return this.tryGetEnvVarSync(envVarRefArg);
     }
     tryGetEnvVarSync(envVarName) {
+        // read lazily: a source is only touched once every earlier one came back undefined, so a name
+        // the process environment answers never opens a secret file, and a malformed secret.json only
+        // ever affects the names that actually reach it
         const sources = [
-            this.getFromEnvironmentVariable(envVarName),
-            this.getFromEnvYamlOrJsonFile(envVarName),
-            this.getFromDockerSecret(envVarName),
-            this.getFromDockerSecretJson(envVarName)
+            () => this.getFromEnvironmentVariable(envVarName),
+            () => this.getFromEnvYamlOrJsonFile(envVarName),
+            () => this.getFromDockerSecret(envVarName),
+            () => this.getFromDockerSecretJson(envVarName),
         ];
-        for (const value of sources) {
+        for (const readSource of sources) {
+            const value = readSource();
             if (value !== undefined) {
                 return value;
             }
         }
         return undefined;
     }
+    /** renders env var references for an error message, naming a resolver function where it has one */
+    describeEnvVarRefs(envVarNameOrNames) {
+        const envVarRefs = Array.isArray(envVarNameOrNames) ? envVarNameOrNames : [envVarNameOrNames];
+        return envVarRefs
+            .map((envVarRef) => typeof envVarRef === 'function'
+            ? `${envVarRef.name || 'anonymous'}()`
+            : envVarRef)
+            .join(', ');
+    }
     getFromEnvironmentVariable(envVarName) {
         return process.env[envVarName];
     }
@@ -174,19 +210,27 @@ export class Qenv {
             return undefined;
         }
     }
+    /**
+     * the directory Docker mounts secrets into. It is a method so a test can point both secret
+     * readers at a directory it is allowed to create; a process can never write /run/secrets itself.
+     */
+    getDockerSecretsDirectoryPath() {
+        return '/run/secrets';
+    }
     getFromDockerSecret(envVarName) {
-        const secretPath = `/run/secrets/${envVarName}`;
+        const secretPath = plugins.path.join(this.getDockerSecretsDirectoryPath(), envVarName);
         if (this.fileExists(secretPath)) {
             return plugins.fs.readFileSync(secretPath, 'utf8');
         }
         return undefined;
     }
     getFromDockerSecretJson(envVarName) {
-        if (this.directoryExists('/run/secrets')) {
-            const availableSecrets = plugins.fs.readdirSync('/run/secrets');
+        const secretsDirectoryPath = this.getDockerSecretsDirectoryPath();
+        if (this.directoryExists(secretsDirectoryPath)) {
+            const availableSecrets = plugins.fs.readdirSync(secretsDirectoryPath);
             for (const secret of availableSecrets) {
                 if (secret.includes('secret.json')) {
-                    const secretObject = this.readObjectFromFile(`/run/secrets/${secret}`);
+                    const secretObject = this.readObjectFromFile(plugins.path.join(secretsDirectoryPath, secret));
                     const value = secretObject[envVarName];
                     if (value === undefined) {
                         continue;
@@ -227,7 +271,9 @@ export class Qenv {
         const parsedObject = filePath.endsWith('.json')
             ? JSON.parse(fileString)
             : plugins.yaml.parse(fileString);
-        return typeof parsedObject === 'object' && parsedObject !== null ? parsedObject : {};
+        return typeof parsedObject === 'object' && parsedObject !== null
+            ? parsedObject
+            : {};
     }
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicWVudi5jbGFzc2VzLnFlbnYuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9xZW52LmNsYXNzZXMucWVudi50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssT0FBTyxNQUFNLG1CQUFtQixDQUFDO0FBQzdDLE9BQU8sRUFBRSwrQkFBK0IsRUFBRSxNQUFNLCtDQUErQyxDQUFDO0FBY2hHLE1BQU0sT0FBTyxJQUFJO0lBa0JmOzs7Ozs7OztPQVFHO0lBQ0gsWUFDRSxzQkFBOEIsT0FBTyxDQUFDLEdBQUcsRUFBRSxFQUMzQyxrQkFBMkIsRUFDM0IsZ0JBQXlCLElBQUk7UUE3Qi9CLHFEQUFxRDtRQUM5QyxvQkFBZSxHQUFhLEVBQUUsQ0FBQztRQUV0QyxnREFBZ0Q7UUFDekMscUJBQWdCLEdBQWEsRUFBRSxDQUFDO1FBRXZDLGlEQUFpRDtRQUMxQyxtQkFBYyxHQUFhLEVBQUUsQ0FBQztRQUVyQywwREFBMEQ7UUFDbkQsbUJBQWMsR0FBb0IsRUFBRSxDQUFDO1FBRXJDLFdBQU0sR0FBRyxJQUFJLE9BQU8sQ0FBQyxRQUFRLENBQUMsVUFBVSxFQUFFLENBQUM7UUFFM0MseUJBQW9CLEdBQUcsRUFBRSxDQUFDO1FBaUIvQixJQUFJLENBQUMsbUJBQW1CLENBQUMsbUJBQW1CLEVBQUUsa0JBQWtCLENBQUMsQ0FBQztRQUNsRSxJQUFJLENBQUMsbUJBQW1CLEVBQUUsQ0FBQztRQUMzQixJQUFJLENBQUMsb0JBQW9CLEVBQUUsQ0FBQztRQUM1QixJQUFJLENBQUMsc0JBQXNCLENBQUMsYUFBYSxDQUFDLENBQUM7SUFDN0MsQ0FBQztJQUVPLG1CQUFtQixDQUFDLG1CQUEyQixFQUFFLGtCQUEyQjtRQUNsRixJQUFJLENBQUMsb0JBQW9CLEdBQUcsT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQzNDLE9BQU8sQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLG1CQUFtQixDQUFDLEVBQ3pDLFVBQVUsQ0FDWCxDQUFDO1FBRUYsSUFBSSxrQkFBa0IsRUFBRSxDQUFDO1lBQ3ZCLE1BQU0sZUFBZSxHQUFHLE9BQU8sQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLGtCQUFrQixDQUFDLENBQUM7WUFFakUsTUFBTSxlQUFlLEdBQUcsT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsZUFBZSxFQUFFLFVBQVUsQ0FBQyxDQUFDO1lBQ3ZFLE1BQU0sY0FBYyxHQUFHLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLGVBQWUsRUFBRSxTQUFTLENBQUMsQ0FBQztZQUNyRSxNQUFNLGVBQWUsR0FBRyxPQUFPLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxlQUFlLEVBQUUsVUFBVSxDQUFDLENBQUM7WUFFdkUsTUFBTSxpQkFBaUIsR0FBRyxJQUFJLENBQUMsVUFBVSxDQUFDLGVBQWUsQ0FBQyxDQUFDO1lBQzNELE1BQU0sZ0JBQWdCLEdBQUcsSUFBSSxDQUFDLFVBQVUsQ0FBQyxjQUFjLENBQUMsQ0FBQztZQUN6RCxNQUFNLGlCQUFpQixHQUFHLElBQUksQ0FBQyxVQUFVLENBQUMsZUFBZSxDQUFDLENBQUM7WUFFM0QsSUFBSSxpQkFBaUIsSUFBSSxDQUFDLGdCQUFnQixJQUFJLGlCQUFpQixDQUFDLEVBQUUsQ0FBQztnQkFDakUsSUFBSSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsTUFBTSxFQUFFLHVEQUF1RCxDQUFDLENBQUM7Z0JBQ2pGLElBQUksQ0FBQyxtQkFBbUIsR0FBRyxlQUFlLENBQUM7WUFDN0MsQ0FBQztpQkFBTSxJQUFJLGlCQUFpQixFQUFFLENBQUM7Z0JBQzdCLElBQUksQ0FBQyxtQkFBbUIsR0FBRyxlQUFlLENBQUM7WUFDN0MsQ0FBQztpQkFBTSxJQUFJLGdCQUFnQixFQUFFLENBQUM7Z0JBQzVCLElBQUksQ0FBQyxtQkFBbUIsR0FBRyxjQUFjLENBQUM7WUFDNUMsQ0FBQztpQkFBTSxJQUFJLGlCQUFpQixFQUFFLENBQUM7Z0JBQzdCLElBQUksQ0FBQyxtQkFBbUIsR0FBRyxlQUFlLENBQUM7WUFDN0MsQ0FBQztRQUNILENBQUM7SUFDSCxDQUFDO0lBRU8sbUJBQW1CO1FBQ3pCLElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxvQkFBb0IsQ0FBQyxFQUFFLENBQUM7WUFDaEQsT0FBTztRQUNULENBQUM7UUFDRCxNQUFNLFFBQVEsR0FBRyxJQUFJLENBQUMsa0JBQWtCLENBQUMsSUFBSSxDQUFDLG9CQUFvQixDQUFDLENBQUM7UUFDcEUsTUFBTSxvQkFBb0IsR0FBRyxRQUFRLENBQUMsVUFBVSxDQUFDLENBQUM7UUFDbEQsSUFBSSxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsb0JBQW9CLENBQUMsRUFBRSxDQUFDO1lBQ3pDLElBQUksQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLE1BQU0sRUFBRSwrQ0FBK0MsQ0FBQyxDQUFDO1lBQ3pFLE9BQU87UUFDVCxDQUFDO1FBQ0QsTUFBTSxlQUFlLEdBQWMsb0JBQW9CLENBQUM7UUFDeEQsSUFBSSxDQUFDLGVBQWUsQ0FBQyxJQUFJLENBQ3ZCLEdBQUcsZUFBZSxDQUFDLE1BQU0sQ0FBQyxDQUFDLEtBQUssRUFBbUIsRUFBRSxDQUFDLE9BQU8sS0FBSyxLQUFLLFFBQVEsQ0FBQyxDQUNqRixDQUFDO0lBQ0osQ0FBQztJQUVPLG9CQUFvQjtRQUMxQixnR0FBZ0c7UUFDaEcsNkZBQTZGO1FBQzdGLDhGQUE4RjtRQUM5Rix1QkFBdUI7UUFDdkIsS0FBSyxNQUFNLE1BQU0sSUFBSSxJQUFJLENBQUMsZUFBZSxFQUFFLENBQUM7WUFDMUMsTUFBTSxLQUFLLEdBQUcsSUFBSSxDQUFDLGdCQUFnQixDQUFDLE1BQU0sQ0FBQyxDQUFDO1lBQzVDLElBQUksS0FBSyxLQUFLLFNBQVMsRUFBRSxDQUFDO2dCQUN4QixJQUFJLENBQUMsZ0JBQWdCLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDO2dCQUNuQyxJQUFJLENBQUMsY0FBYyxDQUFDLE1BQU0sQ0FBQyxHQUFHLEtBQUssQ0FBQztZQUN0QyxDQUFDO1FBQ0gsQ0FBQztJQUNILENBQUM7SUFFTyxzQkFBc0IsQ0FBQyxhQUFzQjtRQUNuRCxJQUFJLENBQUMsY0FBYyxHQUFHLElBQUksQ0FBQyxlQUFlLENBQUMsTUFBTSxDQUMvQyxDQUFDLE1BQU0sRUFBRSxFQUFFLENBQUMsQ0FBQyxJQUFJLENBQUMsZ0JBQWdCLENBQUMsUUFBUSxDQUFDLE1BQU0sQ0FBQyxDQUNwRCxDQUFDO1FBRUYsSUFBSSxJQUFJLENBQUMsY0FBYyxDQUFDLE1BQU0sS0FBSyxDQUFDLEVBQUUsQ0FBQztZQUNyQyxPQUFPO1FBQ1QsQ0FBQztRQUVELElBQUksYUFBYSxFQUFFLENBQUM7WUFDbEIsOEZBQThGO1lBQzlGLE1BQU0sSUFBSSwrQkFBK0IsQ0FBQztnQkFDeEMsY0FBYyxFQUFFLElBQUksQ0FBQyxjQUFjO2dCQUNuQyxlQUFlLEVBQUUsSUFBSSxDQUFDLGVBQWU7Z0JBQ3JDLG9CQUFvQixFQUFFLElBQUksQ0FBQyxvQkFBb0I7YUFDaEQsQ0FBQyxDQUFDO1FBQ0wsQ0FBQztRQUVELElBQUksQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUNiLE1BQU0sRUFDTixzRUFBc0UsSUFBSSxDQUFDLGNBQWMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FDdkcsQ0FBQztJQUNKLENBQUM7SUFFRDs7OztPQUlHO0lBQ0ksS0FBSyxDQUFDLGlCQUFpQixDQUM1QixpQkFBNEM7UUFFNUMsSUFBSSxLQUFLLENBQUMsT0FBTyxDQUFDLGlCQUFpQixDQUFDLEVBQUUsQ0FBQztZQUNyQyxLQUFLLE1BQU0sVUFBVSxJQUFJLGlCQUFpQixFQUFFLENBQUM7Z0JBQzNDLE1BQU0sS0FBSyxHQUFHLE1BQU0sSUFBSSxDQUFDLFlBQVksQ0FBQyxVQUFVLENBQUMsQ0FBQztnQkFDbEQsSUFBSSxLQUFLLEtBQUssU0FBUyxFQUFFLENBQUM7b0JBQ3hCLE9BQU8sS0FBSyxDQUFDO2dCQUNmLENBQUM7WUFDSCxDQUFDO1lBQ0QsT0FBTyxTQUFTLENBQUM7UUFDbkIsQ0FBQzthQUFNLENBQUM7WUFDTixPQUFPLE1BQU0sSUFBSSxDQUFDLFlBQVksQ0FBQyxpQkFBaUIsQ0FBQyxDQUFDO1FBQ3BELENBQUM7SUFDSCxDQUFDO0lBRUQ7OztPQUdHO0lBQ0ksS0FBSyxDQUFDLHVCQUF1QixDQUNsQyxpQkFBNEM7UUFFNUMsTUFBTSxLQUFLLEdBQUcsTUFBTSxJQUFJLENBQUMsaUJBQWlCLENBQUMsaUJBQWlCLENBQUMsQ0FBQztRQUM5RCxJQUFJLEtBQUssS0FBSyxTQUFTLEVBQUUsQ0FBQztZQUN4QixNQUFNLElBQUksS0FBSyxDQUFDLFdBQVcsSUFBSSxDQUFDLGtCQUFrQixDQUFDLGlCQUFpQixDQUFDLGNBQWMsQ0FBQyxDQUFDO1FBQ3ZGLENBQUM7UUFDRCxPQUFPLEtBQUssQ0FBQztJQUNmLENBQUM7SUFFRDs7OztPQUlHO0lBQ0kscUJBQXFCLENBQUMsaUJBQW9DO1FBQy9ELElBQUksS0FBSyxDQUFDLE9BQU8sQ0FBQyxpQkFBaUIsQ0FBQyxFQUFFLENBQUM7WUFDckMsS0FBSyxNQUFNLFVBQVUsSUFBSSxpQkFBaUIsRUFBRSxDQUFDO2dCQUMzQyxNQUFNLEtBQUssR0FBRyxJQUFJLENBQUMsZ0JBQWdCLENBQUMsVUFBVSxDQUFDLENBQUM7Z0JBQ2hELElBQUksS0FBSyxLQUFLLFNBQVMsRUFBRSxDQUFDO29CQUN4QixPQUFPLEtBQUssQ0FBQztnQkFDZixDQUFDO1lBQ0gsQ0FBQztZQUNELE9BQU8sU0FBUyxDQUFDO1FBQ25CLENBQUM7YUFBTSxDQUFDO1lBQ04sT0FBTyxJQUFJLENBQUMsZ0JBQWdCLENBQUMsaUJBQWlCLENBQUMsQ0FBQztRQUNsRCxDQUFDO0lBQ0gsQ0FBQztJQUVEOzs7O09BSUc7SUFDSSxLQUFLLENBQUMseUJBQXlCLENBQ3BDLGlCQUFvQztRQUVwQyxNQUFNLFFBQVEsR0FBRyxNQUFNLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxpQkFBaUIsQ0FBQyxDQUFDO1FBQ2pFLElBQUksUUFBUSxJQUFJLFFBQVEsQ0FBQyxVQUFVLENBQUMsZUFBZSxDQUFDLEVBQUUsQ0FBQztZQUNyRCxNQUFNLFVBQVUsR0FBRyxRQUFRLENBQUMsS0FBSyxDQUFDLGVBQWUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDO1lBQ3RELE9BQU8sSUFBSSxDQUFDLFlBQVksQ0FBQyxVQUFVLENBQUMsQ0FBQztRQUN2QyxDQUFDO1FBQ0QsT0FBTyxRQUFRLENBQUM7SUFDbEIsQ0FBQztJQUVPLEtBQUssQ0FBQyxZQUFZLENBQUMsWUFBd0I7UUFDakQsSUFBSSxPQUFPLFlBQVksS0FBSyxVQUFVLEVBQUUsQ0FBQztZQUN2QyxPQUFPLE1BQU0sWUFBWSxFQUFFLENBQUM7UUFDOUIsQ0FBQztRQUVELDRGQUE0RjtRQUM1RixPQUFPLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxZQUFZLENBQUMsQ0FBQztJQUM3QyxDQUFDO0lBRU8sZ0JBQWdCLENBQUMsVUFBa0I7UUFDekMsOEZBQThGO1FBQzlGLDhGQUE4RjtRQUM5RixnREFBZ0Q7UUFDaEQsTUFBTSxPQUFPLEdBQW9DO1lBQy9DLEdBQUcsRUFBRSxDQUFDLElBQUksQ0FBQywwQkFBMEIsQ0FBQyxVQUFVLENBQUM7WUFDakQsR0FBRyxFQUFFLENBQUMsSUFBSSxDQUFDLHdCQUF3QixDQUFDLFVBQVUsQ0FBQztZQUMvQyxHQUFHLEVBQUUsQ0FBQyxJQUFJLENBQUMsbUJBQW1CLENBQUMsVUFBVSxDQUFDO1lBQzFDLEdBQUcsRUFBRSxDQUFDLElBQUksQ0FBQyx1QkFBdUIsQ0FBQyxVQUFVLENBQUM7U0FDL0MsQ0FBQztRQUVGLEtBQUssTUFBTSxVQUFVLElBQUksT0FBTyxFQUFFLENBQUM7WUFDakMsTUFBTSxLQUFLLEdBQUcsVUFBVSxFQUFFLENBQUM7WUFDM0IsSUFBSSxLQUFLLEtBQUssU0FBUyxFQUFFLENBQUM7Z0JBQ3hCLE9BQU8sS0FBSyxDQUFDO1lBQ2YsQ0FBQztRQUNILENBQUM7UUFFRCxPQUFPLFNBQVMsQ0FBQztJQUNuQixDQUFDO0lBRUQsbUdBQW1HO0lBQzNGLGtCQUFrQixDQUFDLGlCQUE0QztRQUNyRSxNQUFNLFVBQVUsR0FBRyxLQUFLLENBQUMsT0FBTyxDQUFDLGlCQUFpQixDQUFDLENBQUMsQ0FBQyxDQUFDLGlCQUFpQixDQUFDLENBQUMsQ0FBQyxDQUFDLGlCQUFpQixDQUFDLENBQUM7UUFDOUYsT0FBTyxVQUFVO2FBQ2QsR0FBRyxDQUFDLENBQUMsU0FBUyxFQUFFLEVBQUUsQ0FDakIsT0FBTyxTQUFTLEtBQUssVUFBVTtZQUM3QixDQUFDLENBQUMsR0FBRyxTQUFTLENBQUMsSUFBSSxJQUFJLFdBQVcsSUFBSTtZQUN0QyxDQUFDLENBQUMsU0FBUyxDQUNkO2FBQ0EsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDO0lBQ2hCLENBQUM7SUFFTywwQkFBMEIsQ0FBQyxVQUFrQjtRQUNuRCxPQUFPLE9BQU8sQ0FBQyxHQUFHLENBQUMsVUFBVSxDQUFDLENBQUM7SUFDakMsQ0FBQztJQUVPLHdCQUF3QixDQUFDLFVBQWtCO1FBQ2pELElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxtQkFBbUIsQ0FBQyxFQUFFLENBQUM7WUFDL0MsT0FBTyxTQUFTLENBQUM7UUFDbkIsQ0FBQztRQUNELElBQUksQ0FBQztZQUNILE1BQU0sT0FBTyxHQUFHLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxJQUFJLENBQUMsbUJBQW1CLENBQUMsQ0FBQztZQUNsRSxNQUFNLEtBQUssR0FBRyxPQUFPLENBQUMsVUFBVSxDQUFDLENBQUM7WUFDbEMsSUFBSSxLQUFLLEtBQUssU0FBUyxFQUFFLENBQUM7Z0JBQ3hCLE9BQU8sU0FBUyxDQUFDO1lBQ25CLENBQUM7WUFDRCxJQUFJLE9BQU8sS0FBSyxLQUFLLFFBQVEsSUFBSSxLQUFLLEtBQUssSUFBSSxFQUFFLENBQUM7Z0JBQ2hELE9BQU8sZUFBZSxHQUFHLElBQUksQ0FBQyxZQUFZLENBQUMsS0FBSyxDQUFDLENBQUM7WUFDcEQsQ0FBQztZQUNELE9BQU8sTUFBTSxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQ3ZCLENBQUM7UUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1lBQ2YsT0FBTyxTQUFTLENBQUM7UUFDbkIsQ0FBQztJQUNILENBQUM7SUFFRDs7O09BR0c7SUFDTyw2QkFBNkI7UUFDckMsT0FBTyxjQUFjLENBQUM7SUFDeEIsQ0FBQztJQUVPLG1CQUFtQixDQUFDLFVBQWtCO1FBQzVDLE1BQU0sVUFBVSxHQUFHLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyw2QkFBNkIsRUFBRSxFQUFFLFVBQVUsQ0FBQyxDQUFDO1FBQ3ZGLElBQUksSUFBSSxDQUFDLFVBQVUsQ0FBQyxVQUFVLENBQUMsRUFBRSxDQUFDO1lBQ2hDLE9BQU8sT0FBTyxDQUFDLEVBQUUsQ0FBQyxZQUFZLENBQUMsVUFBVSxFQUFFLE1BQU0sQ0FBQyxDQUFDO1FBQ3JELENBQUM7UUFDRCxPQUFPLFNBQVMsQ0FBQztJQUNuQixDQUFDO0lBRU8sdUJBQXVCLENBQUMsVUFBa0I7UUFDaEQsTUFBTSxvQkFBb0IsR0FBRyxJQUFJLENBQUMsNkJBQTZCLEVBQUUsQ0FBQztRQUNsRSxJQUFJLElBQUksQ0FBQyxlQUFlLENBQUMsb0JBQW9CLENBQUMsRUFBRSxDQUFDO1lBQy9DLE1BQU0sZ0JBQWdCLEdBQUcsT0FBTyxDQUFDLEVBQUUsQ0FBQyxXQUFXLENBQUMsb0JBQW9CLENBQUMsQ0FBQztZQUN0RSxLQUFLLE1BQU0sTUFBTSxJQUFJLGdCQUFnQixFQUFFLENBQUM7Z0JBQ3RDLElBQUksTUFBTSxDQUFDLFFBQVEsQ0FBQyxhQUFhLENBQUMsRUFBRSxDQUFDO29CQUNuQyxNQUFNLFlBQVksR0FBRyxJQUFJLENBQUMsa0JBQWtCLENBQzFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLG9CQUFvQixFQUFFLE1BQU0sQ0FBQyxDQUNoRCxDQUFDO29CQUNGLE1BQU0sS0FBSyxHQUFHLFlBQVksQ0FBQyxVQUFVLENBQUMsQ0FBQztvQkFDdkMsSUFBSSxLQUFLLEtBQUssU0FBUyxFQUFFLENBQUM7d0JBQ3hCLFNBQVM7b0JBQ1gsQ0FBQztvQkFDRCxJQUFJLE9BQU8sS0FBSyxLQUFLLFFBQVEsSUFBSSxLQUFLLEtBQUssSUFBSSxFQUFFLENBQUM7d0JBQ2hELE9BQU8sZUFBZSxHQUFHLElBQUksQ0FBQyxZQUFZLENBQUMsS0FBSyxDQUFDLENBQUM7b0JBQ3BELENBQUM7b0JBQ0QsT0FBTyxNQUFNLENBQUMsS0FBSyxDQUFDLENBQUM7Z0JBQ3ZCLENBQUM7WUFDSCxDQUFDO1FBQ0gsQ0FBQztRQUNELE9BQU8sU0FBUyxDQUFDO0lBQ25CLENBQUM7SUFFTyxZQUFZLENBQUMsSUFBYTtRQUNoQyxNQUFNLFVBQVUsR0FBRyxJQUFJLENBQUMsU0FBUyxDQUFDLElBQUksQ0FBQyxDQUFDO1FBQ3hDLE9BQU8sTUFBTSxDQUFDLElBQUksQ0FBQyxVQUFVLENBQUMsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLENBQUM7SUFDcEQsQ0FBQztJQUVPLFlBQVksQ0FBQyxhQUFxQjtRQUN4QyxNQUFNLGFBQWEsR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLGFBQWEsRUFBRSxRQUFRLENBQUMsQ0FBQyxRQUFRLENBQUMsT0FBTyxDQUFDLENBQUM7UUFDN0UsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDLGFBQWEsQ0FBQyxDQUFDO0lBQ25DLENBQUM7SUFFTyxVQUFVLENBQUMsUUFBNEI7UUFDN0MsSUFBSSxDQUFDLFFBQVEsRUFBRSxDQUFDO1lBQ2QsT0FBTyxLQUFLLENBQUM7UUFDZixDQUFDO1FBQ0QsT0FBTyxPQUFPLENBQUMsRUFBRSxDQUFDLFVBQVUsQ0FBQyxRQUFRLENBQUMsQ0FBQztJQUN6QyxDQUFDO0lBRU8sZUFBZSxDQUFDLGFBQXFCO1FBQzNDLElBQUksQ0FBQztZQUNILE9BQU8sT0FBTyxDQUFDLEVBQUUsQ0FBQyxRQUFRLENBQUMsYUFBYSxDQUFDLENBQUMsV0FBVyxFQUFFLENBQUM7UUFDMUQsQ0FBQztRQUFDLE1BQU0sQ0FBQztZQUNQLE9BQU8sS0FBSyxDQUFDO1FBQ2YsQ0FBQztJQUNILENBQUM7SUFFTyxrQkFBa0IsQ0FBQyxRQUFnQjtRQUN6QyxNQUFNLFVBQVUsR0FBRyxPQUFPLENBQUMsRUFBRSxDQUFDLFlBQVksQ0FBQyxRQUFRLEVBQUUsTUFBTSxDQUFDLENBQUM7UUFDN0QsTUFBTSxZQUFZLEdBQVksUUFBUSxDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUM7WUFDdEQsQ0FBQyxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDO1lBQ3hCLENBQUMsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxVQUFVLENBQUMsQ0FBQztRQUNuQyxPQUFPLE9BQU8sWUFBWSxLQUFLLFFBQVEsSUFBSSxZQUFZLEtBQUssSUFBSTtZQUM5RCxDQUFDLENBQUUsWUFBa0M7WUFDckMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztJQUNULENBQUM7Q0FDRiJ9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@push.rocks/qenv",
-  "version": "7.0.0",
+  "version": "8.0.0",
   "private": false,
   "description": "A module for easily handling environment variables in Node.js projects with support for .yml and .json configuration.",
   "main": "dist_ts/index.js",
@@ -22,14 +22,14 @@
   "author": "Task Venture Capital GmbH <hello@task.vc>",
   "license": "MIT",
   "bugs": {
-    "url": "https://gitlab.com/pushrocks/qenv/issues"
+    "url": "https://code.foss.global/push.rocks/qenv/issues"
   },
   "homepage": "https://code.foss.global/push.rocks/qenv",
   "devDependencies": {
-    "@git.zone/tsbuild": "^4.4.3",
+    "@git.zone/tsbuild": "^4.5.0",
     "@git.zone/tsrun": "^2.0.6",
-    "@git.zone/tstest": "^6.1.0",
-    "@types/node": "^26.5.0"
+    "@git.zone/tstest": "^6.1.1",
+    "@types/node": "^26.5.1"
   },
   "dependencies": {
     "@push.rocks/smartlog": "^3.2.2",

package/readme.md

@@ -10,7 +10,8 @@
 ✅ **Flexible Formats** - Supports `.yml`, `.yaml`, and `.json` configuration files  
 ✅ **Docker Ready** - Built-in support for Docker secrets and secret.json files  
 ✅ **Async & Sync** - Both synchronous and asynchronous variable retrieval  
-✅ **Strict Mode** - Optional strict mode that throws errors for missing variables  
+✅ **Enforced Requirements** - `required:` in `qenv.yml` is checked while constructing, with a typed error  
+✅ **Strict Mode** - Optional strict getter that throws for a missing variable  
 ✅ **Base64 Objects** - Handle complex configuration objects with automatic encoding/decoding  
 ✅ **Dynamic Resolution** - Support for async functions as environment variable sources  
 
@@ -32,7 +33,8 @@ yarn add @push.rocks/qenv
 ```typescript
 import { Qenv } from '@push.rocks/qenv';
 
-// Create a new Qenv instance
+// Create a new Qenv instance. Every name listed under `required:` in qenv.yml is resolved right
+// here, and a missing one throws a QenvMissingRequiredEnvVarsError.
 const qenv = new Qenv('./', './', true);
 
 // Access environment variables
@@ -61,6 +63,10 @@ required:
   - LOG_LEVEL
 ```
 
+Every listed name is resolved while the `Qenv` instance is constructed. What is found lands in
+`availableEnvVars` and, as a string, in `keyValueObject`; what is missing lands in `missingEnvVars`
+and, unless you pass `failOnMissing: false`, makes the constructor throw.
+
 #### 2. Provide Values (`env.yml` or `env.json`)
 
 For local development, create an `env.yml` or `env.json` file:
@@ -97,6 +103,10 @@ Qenv loads variables in this order (first found wins):
 3. **Docker secrets** - From `/run/secrets/`
 4. **Docker secret JSON** - From `/run/secrets/secret.json`
 
+All four sources are synchronous, so `getEnvVarOnDemand` and `getEnvVarOnDemandSync` resolve a name
+identically. A `required:` entry is always a name; an async resolver function is a per-call source
+and never takes part in the requirement check.
+
 ### Handling Complex Objects
 
 Store and retrieve complex configuration objects:
@@ -134,6 +144,9 @@ const fetchFromVault = async () => {
 const secret = await qenv.getEnvVarOnDemand(fetchFromVault);
 ```
 
+The function form of `TEnvVarRef` is honoured by `getEnvVarOnDemand` and `getEnvVarOnDemandStrict`
+only. `getEnvVarOnDemandSync` cannot await, so it accepts names and takes no resolver function.
+
 ### Working with Docker
 
 Qenv seamlessly integrates with Docker secrets:
@@ -168,9 +181,18 @@ const dbPassword = await qenv.getEnvVarOnDemand('db_password');
 Control how your application handles missing environment variables:
 
 ```typescript
-// Fail fast (default behavior)
-const qenvStrict = new Qenv('./', './', true);
-// Application exits if required variables are missing
+import { Qenv, QenvMissingRequiredEnvVarsError } from '@push.rocks/qenv';
+
+// Fail fast (default behaviour): the constructor throws
+try {
+  const qenvStrict = new Qenv('./', './', true);
+} catch (error) {
+  if (error instanceof QenvMissingRequiredEnvVarsError) {
+    console.error('Missing variables:', error.missingEnvVars);
+    console.error('Declared in:', error.qenvFilePathAbsolute);
+  }
+  throw error;
+}
 
 // Graceful handling
 const qenvRelaxed = new Qenv('./', './', false);
@@ -183,6 +205,16 @@ if (qenvRelaxed.missingEnvVars.length > 0) {
 }
 ```
 
+qenv never ends the process: the caller decides what an incomplete environment means. Where two
+copies of qenv can end up in one dependency tree, `instanceof` is unreliable - match on the code
+instead:
+
+```typescript
+if (error instanceof Error && 'code' in error && error.code === 'QENV_MISSING_REQUIRED_ENV_VARS') {
+  // handle the incomplete environment
+}
+```
+
 ### Strict Mode for Critical Variables
 
 Use the new strict getter when you absolutely need a variable:
@@ -191,15 +223,19 @@ Use the new strict getter when you absolutely need a variable:
 try {
   // This will throw if TOKEN is not set
   const token = await qenv.getEnvVarOnDemandStrict('TOKEN');
-  
+
   // You can also check multiple fallback names
   const db = await qenv.getEnvVarOnDemandStrict(['DATABASE_URL', 'DB_CONNECTION']);
 } catch (error) {
+  // the message names every reference that could not be resolved
   console.error('Critical configuration missing:', error.message);
-  process.exit(1);
+  throw error;
 }
 ```
 
+A name that `qenv.yml` already lists under `required:` is resolved at construction time, so the
+strict getter is for variables you look up on demand.
+
 ## 🏗️ CI/CD Integration
 
 ### GitHub Actions
@@ -276,12 +312,12 @@ qenv.logger.log('info', 'Custom log message');
 Here's how you might use qenv in a production Node.js application:
 
 ```typescript
-import { Qenv } from '@push.rocks/qenv';
+import { Qenv, QenvMissingRequiredEnvVarsError } from '@push.rocks/qenv';
 import { createServer } from './server';
 import { connectDatabase } from './database';
 
 async function bootstrap() {
-  // Initialize environment
+  // Initialize environment: throws when qenv.yml requires something no source provides
   const qenv = new Qenv();
   
   // Load critical configuration
@@ -304,7 +340,12 @@ async function bootstrap() {
 }
 
 bootstrap().catch(error => {
-  console.error('Failed to start application:', error);
+  if (error instanceof QenvMissingRequiredEnvVarsError) {
+    console.error('Incomplete environment, missing:', error.missingEnvVars.join(', '));
+  } else {
+    console.error('Failed to start application:', error);
+  }
+  // exiting is the application's decision - qenv itself never calls process.exit
   process.exit(1);
 });
 ```
@@ -318,18 +359,21 @@ bootstrap().catch(error => {
 new Qenv(
   qenvFileBasePathArg?: string,  // Path to qenv.yml (default: process.cwd())
   envFileBasePathArg?: string,   // Path to env.yml/json (default: same as qenv)
-  failOnMissing?: boolean        // Exit on missing vars (default: true)
+  failOnMissing?: boolean        // Throw on missing required vars (default: true)
 )
 ```
 
+Throws `QenvMissingRequiredEnvVarsError` when `failOnMissing` is true and a name listed under
+`required:` is not provided by any source.
+
 #### Methods
 
 | Method | Description | Returns |
 |--------|-------------|---------|
-| `getEnvVarOnDemand(name)` | Get environment variable value | `Promise<string \| undefined>` |
+| `getEnvVarOnDemand(name)` | Get environment variable value, resolver functions included | `Promise<string \| undefined>` |
 | `getEnvVarOnDemandStrict(name)` | Get variable or throw error | `Promise<string>` |
-| `getEnvVarOnDemandSync(name)` | Synchronously get variable | `string \| undefined` |
-| `getEnvVarOnDemandAsObject(name)` | Get variable as decoded object | `Promise<any>` |
+| `getEnvVarOnDemandSync(name)` | Synchronously get variable, names only | `string \| undefined` |
+| `getEnvVarOnDemandAsObject(name)` | Get variable as decoded object | `Promise<unknown>` |
 
 #### Properties
 
@@ -338,7 +382,24 @@ new Qenv(
 | `requiredEnvVars` | `string[]` | List of required variable names |
 | `availableEnvVars` | `string[]` | List of found variable names |
 | `missingEnvVars` | `string[]` | List of missing variable names |
-| `keyValueObject` | `object` | All loaded variables as key-value pairs |
+| `keyValueObject` | `Record<string, string>` | Every available required variable as a resolved string |
+| `qenvFilePathAbsolute` | `string` | Absolute path of the qenv.yml in use |
+| `envFilePathAbsolute` | `string \| undefined` | Absolute path of the env file in use |
+
+### Class: `QenvMissingRequiredEnvVarsError`
+
+Thrown by the constructor when `failOnMissing` is true and a required variable has no source.
+
+| Member | Type | Description |
+|--------|------|-------------|
+| `code` | `'QENV_MISSING_REQUIRED_ENV_VARS'` | Stable identifier, safe across duplicate installs |
+| `missingEnvVars` | `string[]` | The required names no source provided |
+| `requiredEnvVars` | `string[]` | Every name listed under `required:` |
+| `qenvFilePathAbsolute` | `string` | The qenv.yml that declared them |
+
+## Issue Reporting and Security
+
+For reporting bugs, issues, or security vulnerabilities, please visit [community.foss.global/](https://community.foss.global/). This is the central community hub for all issue reporting. Developers who sign and comply with our contribution agreement and go through identification can also get a [code.foss.global/](https://code.foss.global/) account to submit Pull Requests directly.
 
 ## License and Legal Information
 

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@push.rocks/qenv',
-  version: '7.0.0',
+  version: '8.0.0',
   description: 'A module for easily handling environment variables in Node.js projects with support for .yml and .json configuration.'
 }

package/ts/index.ts

@@ -1 +1,2 @@
 export * from './qenv.classes.qenv.js';
+export * from './qenv.classes.missingrequiredenvvarserror.js';

package/ts/qenv.classes.missingrequiredenvvarserror.ts

@@ -0,0 +1,30 @@
+export interface IQenvMissingRequiredEnvVarsErrorOptions {
+  missingEnvVars: string[];
+  requiredEnvVars: string[];
+  qenvFilePathAbsolute: string;
+}
+
+/**
+ * Thrown when a variable listed under `required:` in qenv.yml is not provided by any source.
+ * The names are carried as data so a caller can report or branch on them without parsing the
+ * message, and `code` identifies the refusal even when two copies of qenv end up in one tree,
+ * which makes `instanceof` unreliable.
+ */
+export class QenvMissingRequiredEnvVarsError extends Error {
+  public readonly code = 'QENV_MISSING_REQUIRED_ENV_VARS';
+  public readonly missingEnvVars: string[];
+  public readonly requiredEnvVars: string[];
+  public readonly qenvFilePathAbsolute: string;
+
+  constructor(optionsArg: IQenvMissingRequiredEnvVarsErrorOptions) {
+    super(
+      `qenv is missing required environment variables: ${optionsArg.missingEnvVars.join(', ')}. ` +
+        `They are listed under "required:" in ${optionsArg.qenvFilePathAbsolute} and were found ` +
+        `neither in the process environment, nor in the env file, nor in the Docker secrets.`
+    );
+    this.name = 'QenvMissingRequiredEnvVarsError';
+    this.missingEnvVars = [...optionsArg.missingEnvVars];
+    this.requiredEnvVars = [...optionsArg.requiredEnvVars];
+    this.qenvFilePathAbsolute = optionsArg.qenvFilePathAbsolute;
+  }
+}

package/ts/qenv.classes.qenv.ts

@@ -1,18 +1,45 @@
 import * as plugins from './qenv.plugins.js';
+import { QenvMissingRequiredEnvVarsError } from './qenv.classes.missingrequiredenvvarserror.js';
 
+/**
+ * a reference to an environment variable: its name, or an async function that produces the value.
+ * The function form is only honoured by the async getters; the synchronous getter accepts names.
+ */
 export type TEnvVarRef = string | (() => Promise<string>);
-type TKeyValueObject = Record<string, any>;
+
+/** the resolved value of every available required env var, always a string */
+export type TEnvVarValueMap = Record<string, string>;
+
+/** a parsed qenv.yml, env file or secret.json, whose values are whatever the file declared */
+type TParsedFileObject = Record<string, unknown>;
 
 export class Qenv {
+  /** the names listed under `required:` in qenv.yml */
   public requiredEnvVars: string[] = [];
+
+  /** the required names that a source provided */
   public availableEnvVars: string[] = [];
+
+  /** the required names that no source provided */
   public missingEnvVars: string[] = [];
-  public keyValueObject: TKeyValueObject = {};
+
+  /** the resolved value of every available required name */
+  public keyValueObject: TEnvVarValueMap = {};
+
   public logger = new plugins.smartlog.ConsoleLog();
 
   public qenvFilePathAbsolute = '';
   public envFilePathAbsolute?: string;
 
+  /**
+   * Resolves every name listed under `required:` in qenv.yml while constructing.
+   * @param qenvFileBasePathArg directory that holds qenv.yml
+   * @param envFileBasePathArg directory that holds env.json, env.yml or env.yaml
+   * @param failOnMissing throws a QenvMissingRequiredEnvVarsError when a variable listed under
+   * `required:` in qenv.yml is not provided by any source. Pass false to only record the names in
+   * `missingEnvVars` and continue.
+   * @throws QenvMissingRequiredEnvVarsError
+   */
   constructor(
     qenvFileBasePathArg: string = process.cwd(),
     envFileBasePathArg?: string,
@@ -29,18 +56,18 @@ export class Qenv {
       plugins.path.resolve(qenvFileBasePathArg),
       'qenv.yml'
     );
-  
+
     if (envFileBasePathArg) {
       const envFileBasePath = plugins.path.resolve(envFileBasePathArg);
-  
+
       const envFileJsonPath = plugins.path.join(envFileBasePath, 'env.json');
       const envFileYmlPath = plugins.path.join(envFileBasePath, 'env.yml');
       const envFileYamlPath = plugins.path.join(envFileBasePath, 'env.yaml');
-  
+
       const envFileJsonExists = this.fileExists(envFileJsonPath);
       const envFileYmlExists = this.fileExists(envFileYmlPath);
       const envFileYamlExists = this.fileExists(envFileYamlPath);
-  
+
       if (envFileJsonExists && (envFileYmlExists || envFileYamlExists)) {
         this.logger.log('warn', 'Both env.json and env.yml files exist! Using env.json');
         this.envFilePathAbsolute = envFileJsonPath;
@@ -55,22 +82,28 @@ export class Qenv {
   }
 
   private loadRequiredEnvVars() {
-    if (this.fileExists(this.qenvFilePathAbsolute)) {
-      const qenvFile = this.readObjectFromFile(this.qenvFilePathAbsolute);
-      const requiredEnvVars = qenvFile.required;
-      if (Array.isArray(requiredEnvVars)) {
-        this.requiredEnvVars.push(
-          ...requiredEnvVars.filter((envVar): envVar is string => typeof envVar === 'string')
-        );
-      } else {
-        this.logger.log('warn', 'qenv.yml does not contain a "required" Array!');
-      }
+    if (!this.fileExists(this.qenvFilePathAbsolute)) {
+      return;
+    }
+    const qenvFile = this.readObjectFromFile(this.qenvFilePathAbsolute);
+    const declaredRequirements = qenvFile['required'];
+    if (!Array.isArray(declaredRequirements)) {
+      this.logger.log('warn', 'qenv.yml does not contain a "required" Array!');
+      return;
     }
+    const declaredEntries: unknown[] = declaredRequirements;
+    this.requiredEnvVars.push(
+      ...declaredEntries.filter((entry): entry is string => typeof entry === 'string')
+    );
   }
 
   private loadAvailableEnvVars() {
+    // resolved synchronously: a required env var is always a name, and every source a name can come
+    // from - process environment, env file, Docker secrets - is a synchronous read. Resolving it
+    // here as a promise would store a pending promise instead of a value and make the check below
+    // pass for every name.
     for (const envVar of this.requiredEnvVars) {
-      const value = this.getEnvVarOnDemand(envVar);
+      const value = this.tryGetEnvVarSync(envVar);
       if (value !== undefined) {
         this.availableEnvVars.push(envVar);
         this.keyValueObject[envVar] = value;
@@ -83,18 +116,30 @@ export class Qenv {
       (envVar) => !this.availableEnvVars.includes(envVar)
     );
 
-    if (this.missingEnvVars.length > 0) {
-      console.info('Required Env Vars are:', this.requiredEnvVars);
-      console.error('Missing Env Vars:', this.missingEnvVars);
-      if (failOnMissing) {
-        this.logger.log('error', 'Exiting due to missing env vars!');
-        process.exit(1);
-      } else {
-        this.logger.log('warn', 'qenv is not set to fail on missing environment variables');
-      }
+    if (this.missingEnvVars.length === 0) {
+      return;
     }
+
+    if (failOnMissing) {
+      // a library must not end the process: the caller decides what an incomplete environment means
+      throw new QenvMissingRequiredEnvVarsError({
+        missingEnvVars: this.missingEnvVars,
+        requiredEnvVars: this.requiredEnvVars,
+        qenvFilePathAbsolute: this.qenvFilePathAbsolute,
+      });
+    }
+
+    this.logger.log(
+      'warn',
+      `qenv is not set to fail on missing environment variables. Missing: ${this.missingEnvVars.join(', ')}`
+    );
   }
 
+  /**
+   * Resolves an env var from the process environment, the env file and the Docker secrets, in that
+   * order. An array is tried left to right and the first defined value wins.
+   * @param envVarNameOrNames a name, an async resolver function, or a list of either
+   */
   public async getEnvVarOnDemand(
     envVarNameOrNames: TEnvVarRef | TEnvVarRef[]
   ): Promise<string | undefined> {
@@ -112,23 +157,25 @@ export class Qenv {
   }
 
   /**
-   * Like getEnvVarOnDemand, but throws an error if the env var is not set.
-   * @param envVarNameOrNames 
-   * @returns 
+   * Like getEnvVarOnDemand, but throws when no source provides a value.
+   * @param envVarNameOrNames a name, an async resolver function, or a list of either
    */
   public async getEnvVarOnDemandStrict(
     envVarNameOrNames: TEnvVarRef | TEnvVarRef[]
   ): Promise<string> {
     const value = await this.getEnvVarOnDemand(envVarNameOrNames);
     if (value === undefined) {
-      throw new Error(`Env var ${envVarNameOrNames} is not set!`);
+      throw new Error(`Env var ${this.describeEnvVarRefs(envVarNameOrNames)} is not set!`);
     }
     return value;
   }
 
+  /**
+   * The synchronous counterpart of getEnvVarOnDemand. It resolves names only: an async resolver
+   * function cannot be awaited here, so the function form of TEnvVarRef is not accepted.
+   * @param envVarNameOrNames a name or a list of names
+   */
   public getEnvVarOnDemandSync(envVarNameOrNames: string | string[]): string | undefined {
-    console.warn('requesting env var sync leaves out potentially important async env sources.');
-
     if (Array.isArray(envVarNameOrNames)) {
       for (const envVarName of envVarNameOrNames) {
         const value = this.tryGetEnvVarSync(envVarName);
@@ -142,7 +189,14 @@ export class Qenv {
     }
   }
 
-  public async getEnvVarOnDemandAsObject(envVarNameOrNames: string | string[]): Promise<any> {
+  /**
+   * Resolves an env var whose value was stored as a base64 encoded object and decodes it. A plain
+   * value is returned as the string it is, so the caller narrows what it gets.
+   * @param envVarNameOrNames a name or a list of names
+   */
+  public async getEnvVarOnDemandAsObject(
+    envVarNameOrNames: string | string[]
+  ): Promise<unknown> {
     const rawValue = await this.getEnvVarOnDemand(envVarNameOrNames);
     if (rawValue && rawValue.startsWith('base64Object:')) {
       const base64Part = rawValue.split('base64Object:')[1];
@@ -156,39 +210,43 @@ export class Qenv {
       return await envVarRefArg();
     }
 
-    const sources = [
-      this.getFromEnvironmentVariable(envVarRefArg),
-      this.getFromEnvYamlOrJsonFile(envVarRefArg),
-      this.getFromDockerSecret(envVarRefArg),
-      this.getFromDockerSecretJson(envVarRefArg)
-    ];
-    
-    for (const value of sources) {
-      if (value !== undefined) {
-        return value;
-      }
-    }
-    
-    return undefined;
+    // a name resolves from synchronous sources only, so both getters share one resolution order
+    return this.tryGetEnvVarSync(envVarRefArg);
   }
 
   private tryGetEnvVarSync(envVarName: string): string | undefined {
-    const sources = [
-      this.getFromEnvironmentVariable(envVarName),
-      this.getFromEnvYamlOrJsonFile(envVarName),
-      this.getFromDockerSecret(envVarName),
-      this.getFromDockerSecretJson(envVarName)
+    // read lazily: a source is only touched once every earlier one came back undefined, so a name
+    // the process environment answers never opens a secret file, and a malformed secret.json only
+    // ever affects the names that actually reach it
+    const sources: Array<() => string | undefined> = [
+      () => this.getFromEnvironmentVariable(envVarName),
+      () => this.getFromEnvYamlOrJsonFile(envVarName),
+      () => this.getFromDockerSecret(envVarName),
+      () => this.getFromDockerSecretJson(envVarName),
     ];
-    
-    for (const value of sources) {
+
+    for (const readSource of sources) {
+      const value = readSource();
       if (value !== undefined) {
         return value;
       }
     }
-    
+
     return undefined;
   }
 
+  /** renders env var references for an error message, naming a resolver function where it has one */
+  private describeEnvVarRefs(envVarNameOrNames: TEnvVarRef | TEnvVarRef[]): string {
+    const envVarRefs = Array.isArray(envVarNameOrNames) ? envVarNameOrNames : [envVarNameOrNames];
+    return envVarRefs
+      .map((envVarRef) =>
+        typeof envVarRef === 'function'
+          ? `${envVarRef.name || 'anonymous'}()`
+          : envVarRef
+      )
+      .join(', ');
+  }
+
   private getFromEnvironmentVariable(envVarName: string): string | undefined {
     return process.env[envVarName];
   }
@@ -212,8 +270,16 @@ export class Qenv {
     }
   }
 
+  /**
+   * the directory Docker mounts secrets into. It is a method so a test can point both secret
+   * readers at a directory it is allowed to create; a process can never write /run/secrets itself.
+   */
+  protected getDockerSecretsDirectoryPath(): string {
+    return '/run/secrets';
+  }
+
   private getFromDockerSecret(envVarName: string): string | undefined {
-    const secretPath = `/run/secrets/${envVarName}`;
+    const secretPath = plugins.path.join(this.getDockerSecretsDirectoryPath(), envVarName);
     if (this.fileExists(secretPath)) {
       return plugins.fs.readFileSync(secretPath, 'utf8');
     }
@@ -221,11 +287,14 @@ export class Qenv {
   }
 
   private getFromDockerSecretJson(envVarName: string): string | undefined {
-    if (this.directoryExists('/run/secrets')) {
-      const availableSecrets = plugins.fs.readdirSync('/run/secrets');
+    const secretsDirectoryPath = this.getDockerSecretsDirectoryPath();
+    if (this.directoryExists(secretsDirectoryPath)) {
+      const availableSecrets = plugins.fs.readdirSync(secretsDirectoryPath);
       for (const secret of availableSecrets) {
         if (secret.includes('secret.json')) {
-          const secretObject = this.readObjectFromFile(`/run/secrets/${secret}`);
+          const secretObject = this.readObjectFromFile(
+            plugins.path.join(secretsDirectoryPath, secret)
+          );
           const value = secretObject[envVarName];
           if (value === undefined) {
             continue;
@@ -240,12 +309,12 @@ export class Qenv {
     return undefined;
   }
 
-  private encodeBase64(data: any): string {
+  private encodeBase64(data: unknown): string {
     const jsonString = JSON.stringify(data);
     return Buffer.from(jsonString).toString('base64');
   }
 
-  private decodeBase64(encodedString: string): any {
+  private decodeBase64(encodedString: string): unknown {
     const decodedString = Buffer.from(encodedString, 'base64').toString('utf-8');
     return JSON.parse(decodedString);
   }
@@ -265,11 +334,13 @@ export class Qenv {
     }
   }
 
-  private readObjectFromFile(filePath: string): TKeyValueObject {
+  private readObjectFromFile(filePath: string): TParsedFileObject {
     const fileString = plugins.fs.readFileSync(filePath, 'utf8');
-    const parsedObject = filePath.endsWith('.json')
+    const parsedObject: unknown = filePath.endsWith('.json')
       ? JSON.parse(fileString)
       : plugins.yaml.parse(fileString);
-    return typeof parsedObject === 'object' && parsedObject !== null ? parsedObject : {};
+    return typeof parsedObject === 'object' && parsedObject !== null
+      ? (parsedObject as TParsedFileObject)
+      : {};
   }
 }