@romaintaillandier1978/dotenv-never-lies 0.3.0 → 1.1.0

package/dist/cli/commands/assert.d.ts

@@ -1,5 +1,7 @@
-export declare const assertCommand: (opts: {
+type AssertCliOptions = {
     schema: string;
     source: string;
-}) => Promise<void>;
+};
+export declare const assertCommand: (opts?: AssertCliOptions | undefined) => Promise<void>;
+export {};
 //# sourceMappingURL=assert.d.ts.map

package/dist/cli/commands/assert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assert.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/assert.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,aAAa,GAAU,MAAM;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,kBAwB3E,CAAC"}
+{"version":3,"file":"assert.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/assert.ts"],"names":[],"mappings":"AAOA,KAAK,gBAAgB,GAAG;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,aAAa,GAAU,OAAO,gBAAgB,GAAG,SAAS,KAAG,OAAO,CAAC,IAAI,CAsBrF,CAAC"}

package/dist/cli/commands/assert.js

@@ -3,24 +3,22 @@ import dnl from "../../index.js";
 import { loadDef as loadDef } from "../utils/load-schema.js";
 import { resolveSchemaPath } from "../utils/resolve-schema.js";
 import { z } from "zod";
+import { ValidationError } from "../../errors.js";
 export const assertCommand = async (opts) => {
-    const schemaPath = resolveSchemaPath(opts.schema);
+    const schemaPath = resolveSchemaPath(opts?.schema);
     const envDef = (await loadDef(schemaPath));
     try {
         envDef.assert({
-            source: opts.source ? dnl.readEnvFile(path.resolve(process.cwd(), opts.source)) : process.env,
+            source: opts?.source ? dnl.readEnvFile(path.resolve(process.cwd(), opts.source)) : process.env,
         });
         console.log("✅ Environment is valid");
     }
     catch (error) {
         if (error instanceof z.ZodError) {
-            console.error("❌ Invalid environment variables:\n");
-            for (const issue of error.issues) {
-                const key = issue.path.join(".");
-                console.error(`- ${key}`);
-                console.error(`  → ${issue.message}`);
-            }
-            process.exit(1);
+            throw new ValidationError("Invalid environment variables", error.issues.map((issue) => ({
+                key: issue.path.join("."),
+                message: issue.message,
+            })));
         }
         throw error;
     }

package/dist/cli/commands/explain.d.ts

@@ -1,8 +1,13 @@
+import { Explanation } from "../utils/printer.js";
 type ExplainCliOptions = {
     schema?: string | undefined;
     keys?: string[] | undefined;
     format?: "human" | "json" | undefined;
 };
-export declare const explainCommand: (options?: ExplainCliOptions) => Promise<number>;
+export declare const explainCommand: (options?: ExplainCliOptions) => Promise<{
+    format: "human" | "json";
+    result: Explanation[];
+}>;
+export declare const printHuman: (result: Explanation[]) => void;
 export {};
 //# sourceMappingURL=explain.d.ts.map

package/dist/cli/commands/explain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/explain.ts"],"names":[],"mappings":"AAKA,KAAK,iBAAiB,GAAG;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;CACzC,CAAC;AAEF,eAAO,MAAM,cAAc,GAAU,UAAU,iBAAiB,KAAG,OAAO,CAAC,MAAM,CAmChF,CAAC"}
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/explain.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAiB,MAAM,qBAAqB,CAAC;AAGjE,KAAK,iBAAiB,GAAG;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;CACzC,CAAC;AAEF,eAAO,MAAM,cAAc,GAAU,UAAU,iBAAiB,KAAG,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CA2B7H,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,QAAQ,WAAW,EAAE,SAqB/C,CAAC"}

package/dist/cli/commands/explain.js

@@ -1,10 +1,14 @@
 import { loadDef } from "../utils/load-schema.js";
 import { resolveSchemaPath } from "../utils/resolve-schema.js";
 import { toExplanation } from "../utils/printer.js";
+import { UsageError } from "../../errors.js";
 export const explainCommand = async (options) => {
+    const format = options?.format ?? "human";
+    if (format !== "human" && format !== "json") {
+        throw new UsageError(`Invalid format: ${format}`);
+    }
     const schemaPath = resolveSchemaPath(options?.schema);
     const envDef = (await loadDef(schemaPath));
-    const format = options?.format ?? "human";
     const keysToSerialize = new Array();
     if (options?.keys) {
         keysToSerialize.push(...options.keys);
@@ -17,25 +21,14 @@ export const explainCommand = async (options) => {
         result.push(toExplanation(key, value));
     }
     if (result.length === 0) {
-        console.error("No variables found");
-        return 1;
-    }
-    switch (format) {
-        case "json":
-            console.log(JSON.stringify(result, null, 2));
-            return 0;
-        case "human":
-            printHuman(result);
-            return 0;
-        default:
-            console.error(`Invalid format: ${format}`);
-            return 1;
+        throw new UsageError("No matching environment variables found");
     }
+    return { format, result };
 };
-const printHuman = (result) => {
+export const printHuman = (result) => {
     if (result.length > 1) {
         for (const item of result) {
-            console.log(`${item.key}: ${item.description}  --- dnl explain ${item.key} --format human  for more details`);
+            console.log(`${item.key}: ${item.description}  \t\tfor more details :  dnl explain ${item.key}`);
         }
         return;
     }

package/dist/cli/commands/export.d.ts

@@ -0,0 +1,35 @@
+import dnl from "../../index.js";
+export declare const exportFormatsNames: readonly ["docker-env", "docker-args", "env", "k8s-configmap", "k8s-secret", "github-env", "github-secret", "gitlab-env", "json", "ts", "js"];
+export type ExportFormat = (typeof exportFormatsNames)[number];
+export type ExportResult = {
+    content: string;
+    warnings: string[];
+    out?: string;
+};
+export type ExportCliOptions = {
+    format: ExportFormat;
+    schema?: string | undefined;
+    source?: string | undefined;
+    hideSecret?: boolean;
+    excludeSecret?: boolean;
+    includeComments?: boolean;
+    serializeTyped?: boolean;
+    out?: string | undefined;
+    force?: boolean;
+    k8sName?: string | undefined;
+    githubOrg?: string | undefined;
+};
+export declare const exportCommand: (options: ExportCliOptions) => Promise<ExportResult>;
+export declare const contentByFormat: (format: ExportFormat, envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportEnv: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportDockerArgs: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportDockerEnv: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportK8sConfigmap: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportK8sSecret: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportGithubEnv: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportGithubSecret: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportGitlabEnv: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportJson: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportTs: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+export declare const exportJs: (envDef: dnl.EnvDefinitionHelper<any>, options: ExportCliOptions, warnings: string[]) => string;
+//# sourceMappingURL=export.d.ts.map

package/dist/cli/commands/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/export.ts"],"names":[],"mappings":"AAAA,OAAO,GAA4B,MAAM,gBAAgB,CAAC;AAM1D,eAAO,MAAM,kBAAkB,+IAYrB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,CAAC;AASF,eAAO,MAAM,aAAa,GAAU,SAAS,gBAAgB,KAAG,OAAO,CAAC,YAAY,CAwBnF,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,QAAQ,YAAY,EAAE,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MA2B3I,CAAC;AAaF,eAAO,MAAM,SAAS,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAe/G,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAetH,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAgBrH,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAyBxH,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAsBrH,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAarH,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAqBxH,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAErH,CAAC;AA0BF,eAAO,MAAM,UAAU,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAehH,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAiB9G,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,QAAQ,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,SAAS,gBAAgB,EAAE,UAAU,MAAM,EAAE,KAAG,MAiB9G,CAAC"}

package/dist/cli/commands/export.js

@@ -0,0 +1,268 @@
+import dnl from "../../index.js";
+import { loadDef } from "../utils/load-schema.js";
+import { resolveSchemaPath } from "../utils/resolve-schema.js";
+import path from "path";
+import { UsageError } from "../../errors.js";
+export const exportFormatsNames = [
+    "docker-env",
+    "docker-args",
+    "env",
+    "k8s-configmap",
+    "k8s-secret",
+    "github-env",
+    "github-secret",
+    "gitlab-env",
+    "json",
+    "ts",
+    "js",
+];
+const shellEscape = (value) => {
+    if (value.length === 0) {
+        return "''";
+    }
+    return `'${value.replace(/'/g, "'\\''")}'`;
+};
+export const exportCommand = async (options) => {
+    if (options.githubOrg && options.format !== "github-secret") {
+        throw new UsageError("--github-org can only be used with the github-secret format");
+    }
+    if (options.k8sName && !options.format.startsWith("k8s-")) {
+        throw new UsageError("--k8s-name can only be used with a k8s-* format");
+    }
+    if (options.serializeTyped && !["js", "ts", "json"].includes(options.format)) {
+        throw new UsageError("--serialize-typed is only valid for js, ts and json exports");
+    }
+    const schemaPath = resolveSchemaPath(options?.schema);
+    const envDef = (await loadDef(schemaPath));
+    const warnings = [];
+    const content = contentByFormat(options.format, envDef, options, warnings);
+    return {
+        content,
+        warnings,
+        out: options.out,
+    };
+};
+export const contentByFormat = (format, envDef, options, warnings) => {
+    switch (format) {
+        case "k8s-configmap":
+            return exportK8sConfigmap(envDef, options, warnings);
+        case "k8s-secret":
+            return exportK8sSecret(envDef, options, warnings);
+        case "ts":
+            return exportTs(envDef, options, warnings);
+        case "js":
+            return exportJs(envDef, options, warnings);
+        case "github-env":
+            return exportGithubEnv(envDef, options, warnings);
+        case "github-secret":
+            return exportGithubSecret(envDef, options, warnings);
+        case "gitlab-env":
+            return exportGitlabEnv(envDef, options, warnings);
+        case "json":
+            return exportJson(envDef, options, warnings);
+        case "env":
+            return exportEnv(envDef, options, warnings);
+        case "docker-args":
+            return exportDockerArgs(envDef, options, warnings);
+        case "docker-env":
+            return exportDockerEnv(envDef, options, warnings);
+        default:
+            throw new UsageError(`Unsupported format: ${format}`);
+    }
+};
+// #region serialisation env-like
+const getRawValue = (key, source, envDef, options) => {
+    if (options?.hideSecret && envDef.def[key].secret) {
+        return "********";
+    }
+    const raw = source[key]; // raw value from source (i.e. .env or process.env)
+    return raw == null ? "" : String(raw);
+};
+// this clones the .env
+export const exportEnv = (envDef, options, warnings) => {
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const args = [];
+    for (const key of Object.keys(values)) {
+        if (options?.excludeSecret && envDef.def[key].secret) {
+            continue;
+        }
+        if (options?.includeComments && envDef.def[key].description) {
+            args.push(`# ${envDef.def[key].description}`);
+        }
+        const rawValue = getRawValue(key, source, envDef, options);
+        args.push(`${key}=${rawValue}`);
+    }
+    return args.join("\n");
+};
+export const exportDockerArgs = (envDef, options, warnings) => {
+    if (options?.includeComments) {
+        warnings.push("The --include-comments option is invalid with the docker-args format");
+    }
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const args = [];
+    for (const key of Object.keys(values)) {
+        if (options?.excludeSecret && envDef.def[key].secret) {
+            continue;
+        }
+        const rawValue = getRawValue(key, source, envDef, options);
+        args.push(`-e ${shellEscape(`${key}=${rawValue}`)}`);
+    }
+    return args.join(" ");
+};
+export const exportDockerEnv = (envDef, options, warnings) => {
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const args = [];
+    for (const key of Object.keys(values)) {
+        if (options?.excludeSecret && envDef.def[key].secret) {
+            continue;
+        }
+        if (options?.includeComments && envDef.def[key].description) {
+            args.push(`# ${envDef.def[key].description}`);
+        }
+        const rawValue = getRawValue(key, source, envDef, options);
+        args.push(`${key}=${rawValue}`);
+    }
+    return args.join("\n");
+};
+export const exportK8sConfigmap = (envDef, options, warnings) => {
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const args = [];
+    args.push(`apiVersion: v1`);
+    args.push(`kind: ConfigMap`);
+    args.push(`metadata:`);
+    const name = options?.k8sName ?? "env-config";
+    args.push(`  name: ${name}`);
+    args.push(`data:`);
+    for (const key of Object.keys(values)) {
+        if (envDef.def[key].secret) {
+            if (options?.excludeSecret)
+                continue;
+            if (!options?.hideSecret) {
+                warnings.push(`Secret ${key} exported in a ConfigMap. Use the k8s-secret format.`);
+            }
+        }
+        const rawValue = getRawValue(key, source, envDef, options);
+        args.push(`  ${key}: ${JSON.stringify(rawValue)}`);
+    }
+    return args.join("\n");
+};
+export const exportK8sSecret = (envDef, options, warnings) => {
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const args = [];
+    args.push(`apiVersion: v1`);
+    args.push(`kind: Secret`);
+    args.push(`type: Opaque`);
+    args.push(`metadata:`);
+    const name = options?.k8sName ?? "env-secret";
+    args.push(`  name: ${name}`);
+    args.push(`stringData:`);
+    for (const key of Object.keys(values)) {
+        if (options?.excludeSecret && envDef.def[key].secret)
+            continue;
+        if (!envDef.def[key].secret)
+            continue; // Secret = only variables marked as secret
+        const rawValue = getRawValue(key, source, envDef, options);
+        args.push(`  ${key}: ${JSON.stringify(rawValue)}`);
+    }
+    return args.join("\n");
+};
+export const exportGithubEnv = (envDef, options, warnings) => {
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const args = [];
+    for (const key of Object.keys(values)) {
+        if (options?.excludeSecret && envDef.def[key].secret)
+            continue;
+        const rawValue = getRawValue(key, source, envDef, options);
+        args.push(`printf '%s\\n' ${shellEscape(`${key}=${rawValue}`)} >> "$GITHUB_ENV"`);
+    }
+    return args.join("\n");
+};
+export const exportGithubSecret = (envDef, options, warnings) => {
+    if (options?.hideSecret) {
+        warnings.push("The --hide-secret option is incompatible with github-secret");
+    }
+    if (options?.githubOrg && options.githubOrg.includes(" ")) {
+        warnings.push("github-org contains a space; gh command likely invalid");
+    }
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const scopeFlag = options?.githubOrg ? `--org ${shellEscape(options.githubOrg)}` : "";
+    const args = [];
+    for (const key of Object.keys(values)) {
+        if (!envDef.def[key].secret)
+            continue;
+        if (options?.excludeSecret)
+            continue;
+        const rawValue = getRawValue(key, source, envDef, options);
+        args.push(`printf '%s' ${shellEscape(rawValue)} | gh secret set ${key} ${scopeFlag} --body-file -`.trim());
+    }
+    return args.join("\n");
+};
+export const exportGitlabEnv = (envDef, options, warnings) => {
+    return exportEnv(envDef, options, warnings);
+};
+// #endregion serialisation env-like
+// #region serialisation json/ts/js
+// WARNING : For design reasons and separation of concerns, do not attempt to merge getRawValue and getTypedOrRawValue into a single function.
+const getTypedOrRawValue = (key, source, values, envDef, options) => {
+    if (options?.hideSecret && envDef.def[key].secret) {
+        return "********";
+    }
+    if (options?.serializeTyped) {
+        return values[key]; // runtime validated value
+    }
+    const raw = source[key]; // raw value from source (i.e. .env or process.env)
+    return raw == null ? "" : String(raw);
+};
+export const exportJson = (envDef, options, warnings) => {
+    if (options?.includeComments) {
+        warnings.push("The --include-comments option is ignored for the json format");
+    }
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const args = {};
+    for (const key of Object.keys(values)) {
+        if (options?.excludeSecret && envDef.def[key].secret) {
+            continue;
+        }
+        args[key] = getTypedOrRawValue(key, source, values, envDef, options);
+    }
+    return JSON.stringify(args, null, 2);
+};
+export const exportTs = (envDef, options, warnings) => {
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const middle = [];
+    for (const key of Object.keys(values)) {
+        if (options?.excludeSecret && envDef.def[key].secret) {
+            continue;
+        }
+        if (options?.includeComments && envDef.def[key].description) {
+            middle.push(`    // ${envDef.def[key].description}`);
+        }
+        middle.push(`    ${key}: ${JSON.stringify(getTypedOrRawValue(key, source, values, envDef, options), null, 2)},`);
+    }
+    return `export const env = {\n${middle.join("\n")}\n} as const;`;
+};
+export const exportJs = (envDef, options, warnings) => {
+    const source = options?.source ? dnl.readEnvFile(path.resolve(process.cwd(), options.source)) : process.env;
+    const values = envDef.assert({ source });
+    const middle = [];
+    for (const key of Object.keys(values)) {
+        if (options?.excludeSecret && envDef.def[key].secret) {
+            continue;
+        }
+        if (options?.includeComments && envDef.def[key].description) {
+            middle.push(`    // ${envDef.def[key].description}`);
+        }
+        middle.push(`    ${key}: ${JSON.stringify(getTypedOrRawValue(key, source, values, envDef, options), null, 2)},`);
+    }
+    return `export const env = {\n${middle.join("\n")}\n};`;
+};
+// #endregion serialisation json/ts/js

package/dist/cli/commands/generate.d.ts

@@ -1,7 +1,15 @@
-export declare const generateCommand: (opts: {
+export type GenerateCliOptions = {
     schema?: string;
     out?: string;
     includeSecret?: boolean;
     force?: boolean;
-}) => Promise<void>;
+};
+export type GenerateResult = {
+    content: string;
+    out: string;
+};
+export declare const generateCommand: (opts?: GenerateCliOptions | undefined) => Promise<{
+    content: string;
+    out: string;
+}>;
 //# sourceMappingURL=generate.d.ts.map

package/dist/cli/commands/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/generate.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,eAAe,GAAU,MAAM;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,kBA4BtH,CAAC"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/generate.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,kBAAkB,GAAG;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AACF,MAAM,MAAM,cAAc,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,eAAO,MAAM,eAAe,GAAU,OAAO,kBAAkB,GAAG,SAAS,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CA6BrH,CAAC"}

package/dist/cli/commands/generate.js

@@ -3,14 +3,14 @@ import path from "node:path";
 import { loadDef } from "../utils/load-schema.js";
 import { resolveSchemaPath } from "../utils/resolve-schema.js";
 import { getDefaultEnvValue } from "../utils/printer.js";
+import { ExportError } from "../../errors.js";
 export const generateCommand = async (opts) => {
-    const outFile = opts.out ?? ".env";
+    const outFile = opts?.out ?? ".env";
     const target = path.resolve(process.cwd(), outFile);
-    if (fs.existsSync(target) && !opts.force) {
-        console.error(`❌ ${outFile} already exists. Use --force to overwrite.`);
-        process.exit(1);
+    if (fs.existsSync(target) && !opts?.force) {
+        throw new ExportError(`${outFile} already exists. Use --force to overwrite.`);
     }
-    const schemaPath = resolveSchemaPath(opts.schema);
+    const schemaPath = resolveSchemaPath(opts?.schema);
     const envDef = (await loadDef(schemaPath));
     const lines = [];
     for (const [key, def] of Object.entries(envDef.def)) {
@@ -23,6 +23,8 @@ export const generateCommand = async (opts) => {
         lines.push(""); // blank line
     }
     const output = lines.join("\n");
-    fs.writeFileSync(target, output);
-    console.log(`✅ ${outFile} generated`);
+    return {
+        content: output,
+        out: target,
+    };
 };

package/dist/cli/commands/reverseEnv.d.ts

@@ -1,7 +1,13 @@
-export declare const reverseEnvCommand: (opts: {
+export type ReverseEnvCliOptions = {
     source?: string;
     out?: string;
     force?: boolean;
     guessSecret?: boolean;
-}) => Promise<void>;
+};
+export type ReverseEnvResult = {
+    content: string;
+    out: string;
+    warnings: string[];
+};
+export declare const reverseEnvCommand: (opts?: ReverseEnvCliOptions | undefined) => Promise<ReverseEnvResult>;
 //# sourceMappingURL=reverseEnv.d.ts.map

package/dist/cli/commands/reverseEnv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reverseEnv.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/reverseEnv.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,iBAAiB,GAAU,MAAM;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,kBAiCtH,CAAC"}
+{"version":3,"file":"reverseEnv.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/reverseEnv.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,oBAAoB,GAAG;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AACF,eAAO,MAAM,iBAAiB,GAAU,OAAO,oBAAoB,GAAG,SAAS,KAAG,OAAO,CAAC,gBAAgB,CA6CzG,CAAC"}

package/dist/cli/commands/reverseEnv.js

@@ -2,16 +2,20 @@ import path from "node:path";
 import dnl from "../../index.js";
 import { guessSecret, inferSchema } from "../utils/infer-schema.js";
 import fs from "node:fs";
+import { ExportError } from "../../errors.js";
 export const reverseEnvCommand = async (opts) => {
-    const source = path.resolve(process.cwd(), opts.source ?? ".env");
-    const out = opts.out ?? "env.dnl.ts";
+    const source = path.resolve(process.cwd(), opts?.source ?? ".env");
+    if (!fs.existsSync(source)) {
+        throw new ExportError(`Source env file not found: ${source}`);
+    }
+    const out = opts?.out ?? "env.dnl.ts";
     const target = path.resolve(process.cwd(), out);
-    if (fs.existsSync(target) && !opts.force) {
-        console.error(`❌ ${out} already exists. Use --force to overwrite.`);
-        process.exit(1);
+    if (fs.existsSync(target) && !opts?.force) {
+        throw new ExportError(`${out} already exists. Use --force to overwrite.`);
     }
     const env = dnl.readEnvFile(source);
     const lines = [];
+    const warnings = [];
     lines.push(`// ⚠️ This file was generated by dotenv-never-lies`);
     lines.push(`// Review and adjust schemas, descriptions and secrets before using`);
     lines.push("");
@@ -20,14 +24,23 @@ export const reverseEnvCommand = async (opts) => {
     lines.push("");
     lines.push(`export default define({`);
     for (const [key, value] of Object.entries(env)) {
-        lines.push(`    ${key}: {`);
+        const isValidIdentifier = /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key);
+        const safeKey = isValidIdentifier ? key : JSON.stringify(key);
+        if (!isValidIdentifier) {
+            warnings.push(`Key ${key} is not a valid identifier. It has been escaped to ${safeKey}.`);
+        }
+        lines.push(`    ${safeKey}: {`);
         lines.push(`        description: "TODO",`);
         lines.push(`        schema: ${inferSchema(value)},`);
-        if (opts.guessSecret && guessSecret(key)) {
+        if (opts?.guessSecret && guessSecret(key)) {
             lines.push(`        secret: true,`);
         }
         lines.push(`    },`);
     }
     lines.push(`});`);
-    fs.writeFileSync(target, lines.join("\n"));
+    return {
+        content: lines.join("\n"),
+        out: target,
+        warnings: [...warnings, "Generated schema is a prototype. Review schemas, descriptions and secrets before using."],
+    };
 };