@vite-env/core 0.1.0 → 0.2.0

package/README.md

@@ -0,0 +1,62 @@
+# @vite-env/core
+
+The `env.ts` layer for Vite — define once, validate everywhere, import with types.
+
+- Typed virtual modules (`virtual:env/client`, `virtual:env/server`)
+- Server/client split with build-time leak detection
+- Auto-coercion via Zod v4 (`z.stringbool()`, `z.coerce.number()`)
+- Auto `.d.ts` generation
+- Vite 8 / Rolldown native
+
+## Install
+
+```bash
+pnpm add @vite-env/core zod
+```
+
+## Usage
+
+**1. Define your schema** — `env.ts`
+
+```ts
+import { defineEnv, z } from '@vite-env/core'
+
+export default defineEnv({
+  server: {
+    DATABASE_URL: z.url(),
+    JWT_SECRET: z.string().min(32),
+  },
+  client: {
+    VITE_API_URL: z.url(),
+    VITE_DARK_MODE: z.stringbool().default(false),
+    VITE_NODE_ENV: z.enum(['development', 'test', 'production']).default('development'),
+  },
+})
+```
+
+**2. Add the plugin** — `vite.config.ts`
+
+```ts
+import ViteEnv from '@vite-env/core/plugin'
+import { defineConfig } from 'vite'
+
+export default defineConfig({
+  plugins: [ViteEnv()],
+})
+```
+
+**3. Import typed env**
+
+```ts
+import { env } from 'virtual:env/client'
+
+env.VITE_API_URL // string
+env.VITE_DARK_MODE // boolean
+env.VITE_NODE_ENV // 'development' | 'test' | 'production'
+```
+
+See the [full documentation](https://github.com/pyyupsk/vite-env) for server/client split details, CLI tools, and more.
+
+## License
+
+[MIT](https://github.com/pyyupsk/vite-env/blob/main/LICENSE)

package/dist/config.cjs

@@ -1,10 +1,12 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("./dts-DT7HjKrz.cjs");
+require("./dts-DF71HNdJ.cjs");
 let jiti = require("jiti");
 //#region src/config.ts
 async function loadEnvConfig(configPath) {
 	const mod = await (0, jiti.createJiti)(configPath).import(configPath);
-	return mod.default ?? mod;
+	const def = mod.default ?? mod;
+	if (!def || typeof def !== "object") throw new Error(`[vite-env] env config at ${configPath} must export an object (got ${typeof def}).\n  Use: export default defineEnv({ ... })`);
+	return def;
 }
 //#endregion
 exports.loadEnvConfig = loadEnvConfig;

package/dist/config.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.cjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\nimport { createJiti } from 'jiti'\n\nexport async function loadEnvConfig(configPath: string): Promise<EnvDefinition> {\n  const jiti = createJiti(configPath)\n  const mod = await jiti.import(configPath) as any\n  return (mod.default ?? mod) as EnvDefinition\n}\n"],"mappings":";;;;AAGA,eAAsB,cAAc,YAA4C;CAE9E,MAAM,MAAM,OAAA,GAAA,KAAA,YADY,WAAW,CACZ,OAAO,WAAW;AACzC,QAAQ,IAAI,WAAW"}
+{"version":3,"file":"config.cjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\nimport { createJiti } from 'jiti'\n\nexport async function loadEnvConfig(configPath: string): Promise<EnvDefinition> {\n  const jiti = createJiti(configPath)\n  const mod: Record<string, unknown> = await jiti.import(configPath) as any\n  const def: unknown = mod.default ?? mod\n\n  if (!def || typeof def !== 'object') {\n    throw new Error(\n      `[vite-env] env config at ${configPath} must export an object (got ${typeof def}).\\n`\n      + `  Use: export default defineEnv({ ... })`,\n    )\n  }\n\n  return def as EnvDefinition\n}\n"],"mappings":";;;;AAGA,eAAsB,cAAc,YAA4C;CAE9E,MAAM,MAA+B,OAAA,GAAA,KAAA,YADb,WAAW,CACa,OAAO,WAAW;CAClE,MAAM,MAAe,IAAI,WAAW;AAEpC,KAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,OAAM,IAAI,MACR,4BAA4B,WAAW,8BAA8B,OAAO,IAAI,8CAEjF;AAGH,QAAO"}

package/dist/config.d.cts

@@ -1,4 +1,4 @@
-import { t as EnvDefinition } from "./types-BmEBJZdy.cjs";
+import { t as EnvDefinition } from "./types-DqTMuWwc.cjs";
 
 //#region src/config.d.ts
 declare function loadEnvConfig(configPath: string): Promise<EnvDefinition>;

package/dist/config.d.mts

@@ -1,4 +1,4 @@
-import { t as EnvDefinition } from "./types-CLfG9amO.mjs";
+import { t as EnvDefinition } from "./types-CluiDKAQ.mjs";
 
 //#region src/config.d.ts
 declare function loadEnvConfig(configPath: string): Promise<EnvDefinition>;

package/dist/config.mjs

@@ -2,7 +2,9 @@ import { createJiti } from "jiti";
 //#region src/config.ts
 async function loadEnvConfig(configPath) {
 	const mod = await createJiti(configPath).import(configPath);
-	return mod.default ?? mod;
+	const def = mod.default ?? mod;
+	if (!def || typeof def !== "object") throw new Error(`[vite-env] env config at ${configPath} must export an object (got ${typeof def}).\n  Use: export default defineEnv({ ... })`);
+	return def;
 }
 //#endregion
 export { loadEnvConfig };

package/dist/config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\nimport { createJiti } from 'jiti'\n\nexport async function loadEnvConfig(configPath: string): Promise<EnvDefinition> {\n  const jiti = createJiti(configPath)\n  const mod = await jiti.import(configPath) as any\n  return (mod.default ?? mod) as EnvDefinition\n}\n"],"mappings":";;AAGA,eAAsB,cAAc,YAA4C;CAE9E,MAAM,MAAM,MADC,WAAW,WAAW,CACZ,OAAO,WAAW;AACzC,QAAQ,IAAI,WAAW"}
+{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\nimport { createJiti } from 'jiti'\n\nexport async function loadEnvConfig(configPath: string): Promise<EnvDefinition> {\n  const jiti = createJiti(configPath)\n  const mod: Record<string, unknown> = await jiti.import(configPath) as any\n  const def: unknown = mod.default ?? mod\n\n  if (!def || typeof def !== 'object') {\n    throw new Error(\n      `[vite-env] env config at ${configPath} must export an object (got ${typeof def}).\\n`\n      + `  Use: export default defineEnv({ ... })`,\n    )\n  }\n\n  return def as EnvDefinition\n}\n"],"mappings":";;AAGA,eAAsB,cAAc,YAA4C;CAE9E,MAAM,MAA+B,MADxB,WAAW,WAAW,CACa,OAAO,WAAW;CAClE,MAAM,MAAe,IAAI,WAAW;AAEpC,KAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,OAAM,IAAI,MACR,4BAA4B,WAAW,8BAA8B,OAAO,IAAI,8CAEjF;AAGH,QAAO"}

package/dist/{dts-DT7HjKrz.cjs → dts-DF71HNdJ.cjs}

@@ -32,14 +32,10 @@ node_fs_promises = __toESM(node_fs_promises);
 * Users never need to manually augment ImportMetaEnv again.
 */
 async function generateDts(def, root) {
-	const clientKeys = {
-		...def.client,
-		...def.shared
-	};
+	const clientKeys = { ...def.client };
 	const serverKeys = {
 		...def.server,
-		...def.client,
-		...def.shared
+		...def.client
 	};
 	const dts = `// Auto-generated by @vite-env/core
 // Do not edit manually — re-generated on every dev server start and build
@@ -60,7 +56,12 @@ ${zodShapeToTsFields(serverKeys)}
   export default env
 }
 `;
-	await node_fs_promises.default.writeFile(node_path.default.join(root, "vite-env.d.ts"), dts, "utf-8");
+	const filePath = node_path.default.join(root, "vite-env.d.ts");
+	try {
+		await node_fs_promises.default.writeFile(filePath, dts, "utf-8");
+	} catch (e) {
+		throw new Error(`[vite-env] Failed to write vite-env.d.ts to ${root}. Check file permissions.`, { cause: e });
+	}
 }
 function zodShapeToTsFields(shape) {
 	return Object.entries(shape).map(([key, schema]) => {
@@ -80,7 +81,7 @@ function zodToTs(schema) {
 	return "string";
 }
 function isOptional(schema) {
-	return schema instanceof zod.z.ZodOptional || schema instanceof zod.z.ZodDefault;
+	return schema instanceof zod.z.ZodOptional;
 }
 //#endregion
 Object.defineProperty(exports, "__toESM", {
@@ -96,4 +97,4 @@ Object.defineProperty(exports, "generateDts", {
 	}
 });
 
-//# sourceMappingURL=dts-DT7HjKrz.cjs.map
+//# sourceMappingURL=dts-DF71HNdJ.cjs.map

package/dist/dts-DF71HNdJ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dts-DF71HNdJ.cjs","names":["path","fs","z"],"sources":["../src/dts.ts"],"sourcesContent":["// @env node\nimport type { EnvDefinition } from './types'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { z } from 'zod'\n\n/**\n * Writes vite-env.d.ts to project root.\n * Declares virtual:env/client and virtual:env/server module types.\n * Users never need to manually augment ImportMetaEnv again.\n */\nexport async function generateDts(\n  def: EnvDefinition,\n  root: string,\n): Promise<void> {\n  const clientKeys = {\n    ...def.client,\n  }\n  const serverKeys = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const clientFields = zodShapeToTsFields(clientKeys)\n  const serverFields = zodShapeToTsFields(serverKeys)\n\n  const dts = `// Auto-generated by @vite-env/core\n// Do not edit manually — re-generated on every dev server start and build\n\ndeclare module 'virtual:env/client' {\n  const env: {\n${clientFields}\n  }\n  export { env }\n  export default env\n}\n\ndeclare module 'virtual:env/server' {\n  const env: {\n${serverFields}\n  }\n  export { env }\n  export default env\n}\n`\n\n  const filePath = path.join(root, 'vite-env.d.ts')\n  try {\n    await fs.writeFile(filePath, dts, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env.d.ts to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n\nfunction zodShapeToTsFields(shape: z.ZodRawShape): string {\n  return Object.entries(shape)\n    .map(([key, schema]) => {\n      // Zod v4: ZodRawShape values are $ZodType, cast to ZodTypeAny for instanceof checks\n      const s = schema as unknown as z.ZodTypeAny\n      const tsType = zodToTs(s)\n      const optional = isOptional(s)\n      return `    readonly ${key}${optional ? '?' : ''}: ${tsType}`\n    })\n    .join('\\n')\n}\n\nfunction zodToTs(schema: z.ZodTypeAny): string {\n  if (schema instanceof z.ZodOptional)\n    return zodToTs(schema.unwrap() as unknown as z.ZodTypeAny)\n  if (schema instanceof z.ZodDefault)\n    return zodToTs(schema.def.innerType as unknown as z.ZodTypeAny)\n  if (schema instanceof z.ZodString)\n    return 'string'\n  if (schema instanceof z.ZodNumber)\n    return 'number'\n  if (schema instanceof z.ZodBoolean)\n    return 'boolean'\n  if (schema instanceof z.ZodEnum)\n    return (schema.options as string[]).map(o => `'${o}'`).join(' | ')\n  if (schema instanceof z.ZodPipe)\n    return zodToTs(schema.def.out as unknown as z.ZodTypeAny)\n  return 'string'\n}\n\nfunction isOptional(schema: z.ZodTypeAny): boolean {\n  return schema instanceof z.ZodOptional\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,eAAsB,YACpB,KACA,MACe;CACf,MAAM,aAAa,EACjB,GAAG,IAAI,QACR;CACD,MAAM,aAAa;EACjB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAKD,MAAM,MAAM;;;;;EAHS,mBAAmB,WAAW,CAQtC;;;;;;;;EAPQ,mBAAmB,WAAW,CAetC;;;;;;CAOb,MAAM,WAAWA,UAAAA,QAAK,KAAK,MAAM,gBAAgB;AACjD,KAAI;AACF,QAAMC,iBAAAA,QAAG,UAAU,UAAU,KAAK,QAAQ;UAErC,GAAG;AACR,QAAM,IAAI,MACR,+CAA+C,KAAK,4BACpD,EAAE,OAAO,GAAG,CACb;;;AAIL,SAAS,mBAAmB,OAA8B;AACxD,QAAO,OAAO,QAAQ,MAAM,CACzB,KAAK,CAAC,KAAK,YAAY;EAEtB,MAAM,IAAI;EACV,MAAM,SAAS,QAAQ,EAAE;AAEzB,SAAO,gBAAgB,MADN,WAAW,EAAE,GACU,MAAM,GAAG,IAAI;GACrD,CACD,KAAK,KAAK;;AAGf,SAAS,QAAQ,QAA8B;AAC7C,KAAI,kBAAkBC,IAAAA,EAAE,YACtB,QAAO,QAAQ,OAAO,QAAQ,CAA4B;AAC5D,KAAI,kBAAkBA,IAAAA,EAAE,WACtB,QAAO,QAAQ,OAAO,IAAI,UAAqC;AACjE,KAAI,kBAAkBA,IAAAA,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkBA,IAAAA,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkBA,IAAAA,EAAE,WACtB,QAAO;AACT,KAAI,kBAAkBA,IAAAA,EAAE,QACtB,QAAQ,OAAO,QAAqB,KAAI,MAAK,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;AACpE,KAAI,kBAAkBA,IAAAA,EAAE,QACtB,QAAO,QAAQ,OAAO,IAAI,IAA+B;AAC3D,QAAO;;AAGT,SAAS,WAAW,QAA+B;AACjD,QAAO,kBAAkBA,IAAAA,EAAE"}

package/dist/dts.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_dts = require("./dts-DT7HjKrz.cjs");
+const require_dts = require("./dts-DF71HNdJ.cjs");
 exports.generateDts = require_dts.generateDts;

package/dist/dts.d.cts

@@ -1,4 +1,4 @@
-import { t as EnvDefinition } from "./types-BmEBJZdy.cjs";
+import { t as EnvDefinition } from "./types-DqTMuWwc.cjs";
 
 //#region src/dts.d.ts
 /**

package/dist/dts.d.mts

@@ -1,4 +1,4 @@
-import { t as EnvDefinition } from "./types-CLfG9amO.mjs";
+import { t as EnvDefinition } from "./types-CluiDKAQ.mjs";
 
 //#region src/dts.d.ts
 /**

package/dist/dts.mjs

@@ -8,14 +8,10 @@ import fs from "node:fs/promises";
 * Users never need to manually augment ImportMetaEnv again.
 */
 async function generateDts(def, root) {
-	const clientKeys = {
-		...def.client,
-		...def.shared
-	};
+	const clientKeys = { ...def.client };
 	const serverKeys = {
 		...def.server,
-		...def.client,
-		...def.shared
+		...def.client
 	};
 	const dts = `// Auto-generated by @vite-env/core
 // Do not edit manually — re-generated on every dev server start and build
@@ -36,7 +32,12 @@ ${zodShapeToTsFields(serverKeys)}
   export default env
 }
 `;
-	await fs.writeFile(path.join(root, "vite-env.d.ts"), dts, "utf-8");
+	const filePath = path.join(root, "vite-env.d.ts");
+	try {
+		await fs.writeFile(filePath, dts, "utf-8");
+	} catch (e) {
+		throw new Error(`[vite-env] Failed to write vite-env.d.ts to ${root}. Check file permissions.`, { cause: e });
+	}
 }
 function zodShapeToTsFields(shape) {
 	return Object.entries(shape).map(([key, schema]) => {
@@ -56,7 +57,7 @@ function zodToTs(schema) {
 	return "string";
 }
 function isOptional(schema) {
-	return schema instanceof z.ZodOptional || schema instanceof z.ZodDefault;
+	return schema instanceof z.ZodOptional;
 }
 //#endregion
 export { generateDts };

package/dist/dts.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"dts.mjs","names":[],"sources":["../src/dts.ts"],"sourcesContent":["// @env node\nimport type { EnvDefinition } from './types'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { z } from 'zod'\n\n/**\n * Writes vite-env.d.ts to project root.\n * Declares virtual:env/client and virtual:env/server module types.\n * Users never need to manually augment ImportMetaEnv again.\n */\nexport async function generateDts(\n  def: EnvDefinition,\n  root: string,\n): Promise<void> {\n  const clientKeys = {\n    ...def.client,\n    ...def.shared,\n  }\n  const serverKeys = {\n    ...def.server,\n    ...def.client,\n    ...def.shared,\n  }\n\n  const clientFields = zodShapeToTsFields(clientKeys)\n  const serverFields = zodShapeToTsFields(serverKeys)\n\n  const dts = `// Auto-generated by @vite-env/core\n// Do not edit manually — re-generated on every dev server start and build\n\ndeclare module 'virtual:env/client' {\n  const env: {\n${clientFields}\n  }\n  export { env }\n  export default env\n}\n\ndeclare module 'virtual:env/server' {\n  const env: {\n${serverFields}\n  }\n  export { env }\n  export default env\n}\n`\n\n  await fs.writeFile(path.join(root, 'vite-env.d.ts'), dts, 'utf-8')\n}\n\nfunction zodShapeToTsFields(shape: z.ZodRawShape): string {\n  return Object.entries(shape)\n    .map(([key, schema]) => {\n      // Zod v4: ZodRawShape values are $ZodType, cast to ZodTypeAny for instanceof checks\n      const s = schema as unknown as z.ZodTypeAny\n      const tsType = zodToTs(s)\n      const optional = isOptional(s)\n      return `    readonly ${key}${optional ? '?' : ''}: ${tsType}`\n    })\n    .join('\\n')\n}\n\nfunction zodToTs(schema: z.ZodTypeAny): string {\n  if (schema instanceof z.ZodOptional)\n    return zodToTs(schema.unwrap() as unknown as z.ZodTypeAny)\n  if (schema instanceof z.ZodDefault)\n    return zodToTs(schema.def.innerType as unknown as z.ZodTypeAny)\n  if (schema instanceof z.ZodString)\n    return 'string'\n  if (schema instanceof z.ZodNumber)\n    return 'number'\n  if (schema instanceof z.ZodBoolean)\n    return 'boolean'\n  if (schema instanceof z.ZodEnum)\n    return (schema.options as string[]).map(o => `'${o}'`).join(' | ')\n  if (schema instanceof z.ZodPipe)\n    return zodToTs(schema.def.out as unknown as z.ZodTypeAny)\n  return 'string'\n}\n\nfunction isOptional(schema: z.ZodTypeAny): boolean {\n  return schema instanceof z.ZodOptional || schema instanceof z.ZodDefault\n}\n"],"mappings":";;;;;;;;;AAWA,eAAsB,YACpB,KACA,MACe;CACf,MAAM,aAAa;EACjB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CACD,MAAM,aAAa;EACjB,GAAG,IAAI;EACP,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAKD,MAAM,MAAM;;;;;EAHS,mBAAmB,WAAW,CAQtC;;;;;;;;EAPQ,mBAAmB,WAAW,CAetC;;;;;;AAOb,OAAM,GAAG,UAAU,KAAK,KAAK,MAAM,gBAAgB,EAAE,KAAK,QAAQ;;AAGpE,SAAS,mBAAmB,OAA8B;AACxD,QAAO,OAAO,QAAQ,MAAM,CACzB,KAAK,CAAC,KAAK,YAAY;EAEtB,MAAM,IAAI;EACV,MAAM,SAAS,QAAQ,EAAE;AAEzB,SAAO,gBAAgB,MADN,WAAW,EAAE,GACU,MAAM,GAAG,IAAI;GACrD,CACD,KAAK,KAAK;;AAGf,SAAS,QAAQ,QAA8B;AAC7C,KAAI,kBAAkB,EAAE,YACtB,QAAO,QAAQ,OAAO,QAAQ,CAA4B;AAC5D,KAAI,kBAAkB,EAAE,WACtB,QAAO,QAAQ,OAAO,IAAI,UAAqC;AACjE,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,WACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,QACtB,QAAQ,OAAO,QAAqB,KAAI,MAAK,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;AACpE,KAAI,kBAAkB,EAAE,QACtB,QAAO,QAAQ,OAAO,IAAI,IAA+B;AAC3D,QAAO;;AAGT,SAAS,WAAW,QAA+B;AACjD,QAAO,kBAAkB,EAAE,eAAe,kBAAkB,EAAE"}
+{"version":3,"file":"dts.mjs","names":[],"sources":["../src/dts.ts"],"sourcesContent":["// @env node\nimport type { EnvDefinition } from './types'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { z } from 'zod'\n\n/**\n * Writes vite-env.d.ts to project root.\n * Declares virtual:env/client and virtual:env/server module types.\n * Users never need to manually augment ImportMetaEnv again.\n */\nexport async function generateDts(\n  def: EnvDefinition,\n  root: string,\n): Promise<void> {\n  const clientKeys = {\n    ...def.client,\n  }\n  const serverKeys = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const clientFields = zodShapeToTsFields(clientKeys)\n  const serverFields = zodShapeToTsFields(serverKeys)\n\n  const dts = `// Auto-generated by @vite-env/core\n// Do not edit manually — re-generated on every dev server start and build\n\ndeclare module 'virtual:env/client' {\n  const env: {\n${clientFields}\n  }\n  export { env }\n  export default env\n}\n\ndeclare module 'virtual:env/server' {\n  const env: {\n${serverFields}\n  }\n  export { env }\n  export default env\n}\n`\n\n  const filePath = path.join(root, 'vite-env.d.ts')\n  try {\n    await fs.writeFile(filePath, dts, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env.d.ts to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n\nfunction zodShapeToTsFields(shape: z.ZodRawShape): string {\n  return Object.entries(shape)\n    .map(([key, schema]) => {\n      // Zod v4: ZodRawShape values are $ZodType, cast to ZodTypeAny for instanceof checks\n      const s = schema as unknown as z.ZodTypeAny\n      const tsType = zodToTs(s)\n      const optional = isOptional(s)\n      return `    readonly ${key}${optional ? '?' : ''}: ${tsType}`\n    })\n    .join('\\n')\n}\n\nfunction zodToTs(schema: z.ZodTypeAny): string {\n  if (schema instanceof z.ZodOptional)\n    return zodToTs(schema.unwrap() as unknown as z.ZodTypeAny)\n  if (schema instanceof z.ZodDefault)\n    return zodToTs(schema.def.innerType as unknown as z.ZodTypeAny)\n  if (schema instanceof z.ZodString)\n    return 'string'\n  if (schema instanceof z.ZodNumber)\n    return 'number'\n  if (schema instanceof z.ZodBoolean)\n    return 'boolean'\n  if (schema instanceof z.ZodEnum)\n    return (schema.options as string[]).map(o => `'${o}'`).join(' | ')\n  if (schema instanceof z.ZodPipe)\n    return zodToTs(schema.def.out as unknown as z.ZodTypeAny)\n  return 'string'\n}\n\nfunction isOptional(schema: z.ZodTypeAny): boolean {\n  return schema instanceof z.ZodOptional\n}\n"],"mappings":";;;;;;;;;AAWA,eAAsB,YACpB,KACA,MACe;CACf,MAAM,aAAa,EACjB,GAAG,IAAI,QACR;CACD,MAAM,aAAa;EACjB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAKD,MAAM,MAAM;;;;;EAHS,mBAAmB,WAAW,CAQtC;;;;;;;;EAPQ,mBAAmB,WAAW,CAetC;;;;;;CAOb,MAAM,WAAW,KAAK,KAAK,MAAM,gBAAgB;AACjD,KAAI;AACF,QAAM,GAAG,UAAU,UAAU,KAAK,QAAQ;UAErC,GAAG;AACR,QAAM,IAAI,MACR,+CAA+C,KAAK,4BACpD,EAAE,OAAO,GAAG,CACb;;;AAIL,SAAS,mBAAmB,OAA8B;AACxD,QAAO,OAAO,QAAQ,MAAM,CACzB,KAAK,CAAC,KAAK,YAAY;EAEtB,MAAM,IAAI;EACV,MAAM,SAAS,QAAQ,EAAE;AAEzB,SAAO,gBAAgB,MADN,WAAW,EAAE,GACU,MAAM,GAAG,IAAI;GACrD,CACD,KAAK,KAAK;;AAGf,SAAS,QAAQ,QAA8B;AAC7C,KAAI,kBAAkB,EAAE,YACtB,QAAO,QAAQ,OAAO,QAAQ,CAA4B;AAC5D,KAAI,kBAAkB,EAAE,WACtB,QAAO,QAAQ,OAAO,IAAI,UAAqC;AACjE,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,WACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,QACtB,QAAQ,OAAO,QAAqB,KAAI,MAAK,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;AACpE,KAAI,kBAAkB,EAAE,QACtB,QAAO,QAAQ,OAAO,IAAI,IAA+B;AAC3D,QAAO;;AAGT,SAAS,WAAW,QAA+B;AACjD,QAAO,kBAAkB,EAAE"}

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("./dts-DT7HjKrz.cjs");
+require("./dts-DF71HNdJ.cjs");
 const require_schema = require("./schema.cjs");
 let zod = require("zod");
 exports.defineEnv = require_schema.defineEnv;

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { n as InferClientEnv, r as InferServerEnv, t as EnvDefinition } from "./types-BmEBJZdy.cjs";
+import { n as InferClientEnv, r as InferServerEnv, t as EnvDefinition } from "./types-DqTMuWwc.cjs";
 import { defineEnv } from "./schema.cjs";
 import { z } from "zod";
 export { type EnvDefinition, type InferClientEnv, type InferServerEnv, defineEnv, z };

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { n as InferClientEnv, r as InferServerEnv, t as EnvDefinition } from "./types-CLfG9amO.mjs";
+import { n as InferClientEnv, r as InferServerEnv, t as EnvDefinition } from "./types-CluiDKAQ.mjs";
 import { defineEnv } from "./schema.mjs";
 import { z } from "zod";
 export { type EnvDefinition, type InferClientEnv, type InferServerEnv, defineEnv, z };

package/dist/leak.cjs

@@ -8,8 +8,10 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 * appears as a literal string in any output chunk's source code.
 * Short/common values (< 8 chars) are skipped to avoid false positives.
 */
-function detectServerLeak(def, data, bundle) {
+function detectServerLeak(def, data, bundle, onSkipped) {
 	const serverKeys = new Set(Object.keys(def.server ?? {}));
+	const shortSecrets = Object.entries(data).filter((entry) => serverKeys.has(entry[0]) && typeof entry[1] === "string" && entry[1].length < 8);
+	if (shortSecrets.length > 0 && onSkipped) onSkipped(shortSecrets.map(([k]) => k));
 	const serverSecrets = Object.entries(data).filter((entry) => serverKeys.has(entry[0]) && typeof entry[1] === "string" && entry[1].length >= 8);
 	const chunks = Object.entries(bundle).filter(([, chunk]) => chunk.type === "chunk" && !!chunk.code);
 	const leaks = [];

package/dist/leak.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"leak.cjs","names":[],"sources":["../src/leak.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\n\ninterface LeakReport {\n  key: string\n  chunk: string\n}\n\n/**\n * Scans all client-destined chunks for literal values of server-only vars.\n * Fires in generateBundle() — Rolldown sequential hook, safe.\n *\n * Strategy: for each server-only key, check if its actual runtime value\n * appears as a literal string in any output chunk's source code.\n * Short/common values (< 8 chars) are skipped to avoid false positives.\n */\nexport function detectServerLeak(\n  def: EnvDefinition,\n  data: Record<string, unknown>,\n  bundle: Record<string, { type: string, code?: string }>,\n): LeakReport[] {\n  const serverKeys = new Set(Object.keys(def.server ?? {}))\n\n  const serverSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length >= 8,\n  )\n\n  const chunks = Object.entries(bundle).filter(\n    ([, chunk]) => chunk.type === 'chunk' && !!chunk.code,\n  )\n\n  const leaks: LeakReport[] = []\n  for (const [key, value] of serverSecrets) {\n    for (const [chunkName, chunk] of chunks) {\n      if (chunk.code!.includes(value)) {\n        leaks.push({ key, chunk: chunkName })\n      }\n    }\n  }\n\n  return leaks\n}\n"],"mappings":";;;;;;;;;;AAeA,SAAgB,iBACd,KACA,MACA,QACc;CACd,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,gBAAgB,OAAO,QAAQ,KAAK,CAAC,QACxC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,UAAU,EACzB;CAED,MAAM,SAAS,OAAO,QAAQ,OAAO,CAAC,QACnC,GAAG,WAAW,MAAM,SAAS,WAAW,CAAC,CAAC,MAAM,KAClD;CAED,MAAM,QAAsB,EAAE;AAC9B,MAAK,MAAM,CAAC,KAAK,UAAU,cACzB,MAAK,MAAM,CAAC,WAAW,UAAU,OAC/B,KAAI,MAAM,KAAM,SAAS,MAAM,CAC7B,OAAM,KAAK;EAAE;EAAK,OAAO;EAAW,CAAC;AAK3C,QAAO"}
+{"version":3,"file":"leak.cjs","names":[],"sources":["../src/leak.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\n\ninterface LeakReport {\n  key: string\n  chunk: string\n}\n\n/**\n * Scans all client-destined chunks for literal values of server-only vars.\n * Fires in generateBundle() — Rolldown sequential hook, safe.\n *\n * Strategy: for each server-only key, check if its actual runtime value\n * appears as a literal string in any output chunk's source code.\n * Short/common values (< 8 chars) are skipped to avoid false positives.\n */\nexport function detectServerLeak(\n  def: EnvDefinition,\n  data: Record<string, unknown>,\n  bundle: Record<string, { type: string, code?: string }>,\n  onSkipped?: (keys: string[]) => void,\n): LeakReport[] {\n  const serverKeys = new Set(Object.keys(def.server ?? {}))\n\n  const shortSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length < 8,\n  )\n\n  if (shortSecrets.length > 0 && onSkipped) {\n    onSkipped(shortSecrets.map(([k]) => k))\n  }\n\n  const serverSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length >= 8,\n  )\n\n  const chunks = Object.entries(bundle).filter(\n    ([, chunk]) => chunk.type === 'chunk' && !!chunk.code,\n  )\n\n  const leaks: LeakReport[] = []\n  for (const [key, value] of serverSecrets) {\n    for (const [chunkName, chunk] of chunks) {\n      if (chunk.code!.includes(value)) {\n        leaks.push({ key, chunk: chunkName })\n      }\n    }\n  }\n\n  return leaks\n}\n"],"mappings":";;;;;;;;;;AAeA,SAAgB,iBACd,KACA,MACA,QACA,WACc;CACd,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,eAAe,OAAO,QAAQ,KAAK,CAAC,QACvC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,SAAS,EACxB;AAED,KAAI,aAAa,SAAS,KAAK,UAC7B,WAAU,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC;CAGzC,MAAM,gBAAgB,OAAO,QAAQ,KAAK,CAAC,QACxC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,UAAU,EACzB;CAED,MAAM,SAAS,OAAO,QAAQ,OAAO,CAAC,QACnC,GAAG,WAAW,MAAM,SAAS,WAAW,CAAC,CAAC,MAAM,KAClD;CAED,MAAM,QAAsB,EAAE;AAC9B,MAAK,MAAM,CAAC,KAAK,UAAU,cACzB,MAAK,MAAM,CAAC,WAAW,UAAU,OAC/B,KAAI,MAAM,KAAM,SAAS,MAAM,CAC7B,OAAM,KAAK;EAAE;EAAK,OAAO;EAAW,CAAC;AAK3C,QAAO"}

package/dist/leak.d.cts

@@ -1,4 +1,4 @@
-import { t as EnvDefinition } from "./types-BmEBJZdy.cjs";
+import { t as EnvDefinition } from "./types-DqTMuWwc.cjs";
 
 //#region src/leak.d.ts
 interface LeakReport {
@@ -16,7 +16,7 @@ interface LeakReport {
 declare function detectServerLeak(def: EnvDefinition, data: Record<string, unknown>, bundle: Record<string, {
   type: string;
   code?: string;
-}>): LeakReport[];
+}>, onSkipped?: (keys: string[]) => void): LeakReport[];
 //#endregion
 export { detectServerLeak };
 //# sourceMappingURL=leak.d.cts.map

package/dist/leak.d.mts

@@ -1,4 +1,4 @@
-import { t as EnvDefinition } from "./types-CLfG9amO.mjs";
+import { t as EnvDefinition } from "./types-CluiDKAQ.mjs";
 
 //#region src/leak.d.ts
 interface LeakReport {
@@ -16,7 +16,7 @@ interface LeakReport {
 declare function detectServerLeak(def: EnvDefinition, data: Record<string, unknown>, bundle: Record<string, {
   type: string;
   code?: string;
-}>): LeakReport[];
+}>, onSkipped?: (keys: string[]) => void): LeakReport[];
 //#endregion
 export { detectServerLeak };
 //# sourceMappingURL=leak.d.mts.map

package/dist/leak.mjs

@@ -7,8 +7,10 @@
 * appears as a literal string in any output chunk's source code.
 * Short/common values (< 8 chars) are skipped to avoid false positives.
 */
-function detectServerLeak(def, data, bundle) {
+function detectServerLeak(def, data, bundle, onSkipped) {
 	const serverKeys = new Set(Object.keys(def.server ?? {}));
+	const shortSecrets = Object.entries(data).filter((entry) => serverKeys.has(entry[0]) && typeof entry[1] === "string" && entry[1].length < 8);
+	if (shortSecrets.length > 0 && onSkipped) onSkipped(shortSecrets.map(([k]) => k));
 	const serverSecrets = Object.entries(data).filter((entry) => serverKeys.has(entry[0]) && typeof entry[1] === "string" && entry[1].length >= 8);
 	const chunks = Object.entries(bundle).filter(([, chunk]) => chunk.type === "chunk" && !!chunk.code);
 	const leaks = [];

package/dist/leak.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"leak.mjs","names":[],"sources":["../src/leak.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\n\ninterface LeakReport {\n  key: string\n  chunk: string\n}\n\n/**\n * Scans all client-destined chunks for literal values of server-only vars.\n * Fires in generateBundle() — Rolldown sequential hook, safe.\n *\n * Strategy: for each server-only key, check if its actual runtime value\n * appears as a literal string in any output chunk's source code.\n * Short/common values (< 8 chars) are skipped to avoid false positives.\n */\nexport function detectServerLeak(\n  def: EnvDefinition,\n  data: Record<string, unknown>,\n  bundle: Record<string, { type: string, code?: string }>,\n): LeakReport[] {\n  const serverKeys = new Set(Object.keys(def.server ?? {}))\n\n  const serverSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length >= 8,\n  )\n\n  const chunks = Object.entries(bundle).filter(\n    ([, chunk]) => chunk.type === 'chunk' && !!chunk.code,\n  )\n\n  const leaks: LeakReport[] = []\n  for (const [key, value] of serverSecrets) {\n    for (const [chunkName, chunk] of chunks) {\n      if (chunk.code!.includes(value)) {\n        leaks.push({ key, chunk: chunkName })\n      }\n    }\n  }\n\n  return leaks\n}\n"],"mappings":";;;;;;;;;AAeA,SAAgB,iBACd,KACA,MACA,QACc;CACd,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,gBAAgB,OAAO,QAAQ,KAAK,CAAC,QACxC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,UAAU,EACzB;CAED,MAAM,SAAS,OAAO,QAAQ,OAAO,CAAC,QACnC,GAAG,WAAW,MAAM,SAAS,WAAW,CAAC,CAAC,MAAM,KAClD;CAED,MAAM,QAAsB,EAAE;AAC9B,MAAK,MAAM,CAAC,KAAK,UAAU,cACzB,MAAK,MAAM,CAAC,WAAW,UAAU,OAC/B,KAAI,MAAM,KAAM,SAAS,MAAM,CAC7B,OAAM,KAAK;EAAE;EAAK,OAAO;EAAW,CAAC;AAK3C,QAAO"}
+{"version":3,"file":"leak.mjs","names":[],"sources":["../src/leak.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\n\ninterface LeakReport {\n  key: string\n  chunk: string\n}\n\n/**\n * Scans all client-destined chunks for literal values of server-only vars.\n * Fires in generateBundle() — Rolldown sequential hook, safe.\n *\n * Strategy: for each server-only key, check if its actual runtime value\n * appears as a literal string in any output chunk's source code.\n * Short/common values (< 8 chars) are skipped to avoid false positives.\n */\nexport function detectServerLeak(\n  def: EnvDefinition,\n  data: Record<string, unknown>,\n  bundle: Record<string, { type: string, code?: string }>,\n  onSkipped?: (keys: string[]) => void,\n): LeakReport[] {\n  const serverKeys = new Set(Object.keys(def.server ?? {}))\n\n  const shortSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length < 8,\n  )\n\n  if (shortSecrets.length > 0 && onSkipped) {\n    onSkipped(shortSecrets.map(([k]) => k))\n  }\n\n  const serverSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length >= 8,\n  )\n\n  const chunks = Object.entries(bundle).filter(\n    ([, chunk]) => chunk.type === 'chunk' && !!chunk.code,\n  )\n\n  const leaks: LeakReport[] = []\n  for (const [key, value] of serverSecrets) {\n    for (const [chunkName, chunk] of chunks) {\n      if (chunk.code!.includes(value)) {\n        leaks.push({ key, chunk: chunkName })\n      }\n    }\n  }\n\n  return leaks\n}\n"],"mappings":";;;;;;;;;AAeA,SAAgB,iBACd,KACA,MACA,QACA,WACc;CACd,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,eAAe,OAAO,QAAQ,KAAK,CAAC,QACvC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,SAAS,EACxB;AAED,KAAI,aAAa,SAAS,KAAK,UAC7B,WAAU,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC;CAGzC,MAAM,gBAAgB,OAAO,QAAQ,KAAK,CAAC,QACxC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,UAAU,EACzB;CAED,MAAM,SAAS,OAAO,QAAQ,OAAO,CAAC,QACnC,GAAG,WAAW,MAAM,SAAS,WAAW,CAAC,CAAC,MAAM,KAClD;CAED,MAAM,QAAsB,EAAE;AAC9B,MAAK,MAAM,CAAC,KAAK,UAAU,cACzB,MAAK,MAAM,CAAC,WAAW,UAAU,OAC/B,KAAI,MAAM,KAAM,SAAS,MAAM,CAC7B,OAAM,KAAK;EAAE;EAAK,OAAO;EAAW,CAAC;AAK3C,QAAO"}

package/dist/plugin.cjs

@@ -1,4 +1,4 @@
-const require_dts = require("./dts-DT7HjKrz.cjs");
+const require_dts = require("./dts-DF71HNdJ.cjs");
 const require_schema = require("./schema.cjs");
 const require_config = require("./config.cjs");
 const require_format = require("./format.cjs");
@@ -31,7 +31,7 @@ function filterStrings(env) {
 //#endregion
 //#region src/virtual.ts
 function buildClientModule(def, data) {
-	const clientKeys = new Set([...Object.keys(def.client ?? {}), ...Object.keys(def.shared ?? {})]);
+	const clientKeys = new Set(Object.keys(def.client ?? {}));
 	const clientData = Object.fromEntries(Object.entries(data).filter(([k]) => clientKeys.has(k)));
 	return {
 		moduleType: "js",
@@ -75,7 +75,7 @@ function ViteEnv(options = {}) {
 			}
 			lastValidated = result.data;
 			await require_dts.generateDts(envDefinition, resolvedConfig.root);
-			const count = Object.keys(result.data ?? {}).length;
+			const count = Object.keys(result.data).length;
 			resolvedConfig.logger.info(`  \x1B[32m✓\x1B[0m \x1B[36m[vite-env]\x1B[0m ${count} variables validated`);
 		},
 		resolveId(id) {
@@ -86,15 +86,11 @@ function ViteEnv(options = {}) {
 			if (id === "\0virtual:env/client") return buildClientModule(envDefinition, lastValidated);
 			if (id === "\0virtual:env/server") return buildServerModule(envDefinition, lastValidated);
 		},
-		async generateBundle(_options, bundle) {
+		generateBundle(_options, bundle) {
 			if (resolvedConfig.build.ssr) return;
-			const rawEnv = await loadEnvSources(resolvedConfig);
-			const result = require_schema.validateEnv(envDefinition, rawEnv);
-			if (!result.success) {
-				const formatted = require_format.formatZodError(result.errors);
-				throw new Error(`[vite-env] Env validation failed at bundle emit:\n\n${formatted}`);
-			}
-			const leaks = require_leak.detectServerLeak(envDefinition, result.data || {}, bundle);
+			const leaks = require_leak.detectServerLeak(envDefinition, lastValidated, bundle, (keys) => {
+				resolvedConfig.logger.warn(`  \x1B[33m⚠\x1B[0m \x1B[36m[vite-env]\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(", ")}`);
+			});
 			if (leaks.length > 0) throw new Error(`[vite-env] Server environment variables detected in client bundle!\n\n${leaks.map((l) => `  ✗ ${l.key} found in ${l.chunk}`).join("\n")}\n\n  These variables are marked as server-only and must never reach the browser.`);
 		},
 		configureServer(server) {
@@ -105,19 +101,25 @@ function ViteEnv(options = {}) {
 				if (!node_path.default.basename(file).startsWith(".env")) return;
 				clearTimeout(debounceTimer);
 				debounceTimer = setTimeout(async () => {
-					const rawEnv = await loadEnvSources(resolvedConfig);
-					const result = require_schema.validateEnv(envDefinition, rawEnv);
-					if (!result.success) {
-						const formatted = require_format.formatZodError(result.errors);
-						resolvedConfig.logger.warn(`\n  \x1B[33m⚠\x1B[0m \x1B[36m[vite-env]\x1B[0m Env revalidation failed:\n${formatted}`);
-						return;
-					}
-					lastValidated = result.data;
-					const clientMod = server.moduleGraph.getModuleById("\0virtual:env/client");
-					if (clientMod) {
-						server.moduleGraph.invalidateModule(clientMod);
-						server.hot.send({ type: "full-reload" });
-						resolvedConfig.logger.info(`  \x1B[32m✓\x1B[0m \x1B[36m[vite-env]\x1B[0m Env revalidated`);
+					try {
+						const rawEnv = await loadEnvSources(resolvedConfig);
+						const result = require_schema.validateEnv(envDefinition, rawEnv);
+						if (!result.success) {
+							const formatted = require_format.formatZodError(result.errors);
+							resolvedConfig.logger.warn(`\n  \x1B[33m⚠\x1B[0m \x1B[36m[vite-env]\x1B[0m Env revalidation failed:\n${formatted}`);
+							return;
+						}
+						lastValidated = result.data;
+						const clientMod = server.moduleGraph.getModuleById("\0virtual:env/client");
+						const serverMod = server.moduleGraph.getModuleById("\0virtual:env/server");
+						if (clientMod) server.moduleGraph.invalidateModule(clientMod);
+						if (serverMod) server.moduleGraph.invalidateModule(serverMod);
+						if (clientMod || serverMod) {
+							server.hot.send({ type: "full-reload" });
+							resolvedConfig.logger.info(`  \x1B[32m✓\x1B[0m \x1B[36m[vite-env]\x1B[0m Env revalidated`);
+						}
+					} catch (e) {
+						resolvedConfig.logger.error(`\n  \x1B[31m✗\x1B[0m \x1B[36m[vite-env]\x1B[0m Failed to reload env files: ${e instanceof Error ? e.message : String(e)}`);
 					}
 				}, 150);
 			});

package/dist/plugin.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs","names":["process","path","loadEnvConfig","validateEnv","formatZodError","generateDts","detectServerLeak"],"sources":["../src/sources.ts","../src/virtual.ts","../src/plugin.ts"],"sourcesContent":["// @env node\nimport type { ResolvedConfig } from 'vite'\nimport process from 'node:process'\nimport { loadEnv } from 'vite'\n\n/**\n * Merge priority (highest → lowest):\n *   1. process.env        (CI pipeline secrets win)\n *   2. .env.[mode].local\n *   3. .env.[mode]\n *   4. .env.local\n *   5. .env\n *\n * Prefix '' = load everything, schema decides what's valid.\n */\nexport async function loadEnvSources(\n  config: ResolvedConfig,\n): Promise<Record<string, string>> {\n  const fileEnv = loadEnv(\n    config.mode,\n    config.envDir || config.root,\n    '', // no prefix filter — schema is the filter\n  )\n\n  return {\n    ...fileEnv,\n    ...filterStrings(process.env),\n  }\n}\n\nfunction filterStrings(env: NodeJS.ProcessEnv): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(env).filter(\n      (entry): entry is [string, string] => typeof entry[1] === 'string',\n    ),\n  )\n}\n","import type { EnvDefinition } from './types'\n\nexport function buildClientModule(\n  def: EnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  const clientKeys = new Set([\n    ...Object.keys(def.client ?? {}),\n    ...Object.keys(def.shared ?? {}),\n  ])\n\n  const clientData = Object.fromEntries(\n    Object.entries(data).filter(([k]) => clientKeys.has(k)),\n  )\n\n  return {\n    moduleType: 'js', // Required: Vite 8 / Rolldown explicit moduleType\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(clientData, null, 2)});\nexport default env;`,\n  }\n}\n\nexport function buildServerModule(\n  _def: EnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(data, null, 2)});\nexport default env;`,\n  }\n}\n","// @env node\nimport type { Plugin, ResolvedConfig } from 'vite'\nimport type { EnvDefinition } from './types'\nimport path from 'node:path'\nimport { loadEnvConfig } from './config'\nimport { generateDts } from './dts'\nimport { formatZodError } from './format'\nimport { detectServerLeak } from './leak'\nimport { validateEnv } from './schema'\nimport { loadEnvSources } from './sources'\nimport { buildClientModule, buildServerModule } from './virtual'\n\nexport interface ViteEnvOptions {\n  /**\n   * Path to env definition file.\n   * @default './env.ts' (resolved from project root)\n   */\n  configFile?: string\n}\n\nexport default function ViteEnv(options: ViteEnvOptions = {}): Plugin {\n  let resolvedConfig: ResolvedConfig\n  let envDefinition: EnvDefinition\n  let lastValidated: Record<string, unknown> = {}\n\n  return {\n    name: 'vite-env',\n    enforce: 'pre',\n\n    async configResolved(config) {\n      resolvedConfig = config\n\n      const configPath = path.resolve(\n        config.root,\n        options.configFile ?? 'env.ts',\n      )\n\n      try {\n        envDefinition = await loadEnvConfig(configPath)\n      }\n      catch (e) {\n        throw new Error(\n          `[vite-env] Could not load env definition file at: ${configPath}\\n`\n          + `  Create an env.ts file and export default defineEnv({ ... })`,\n          { cause: e },\n        )\n      }\n    },\n\n    async buildStart() {\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = validateEnv(envDefinition, rawEnv)\n\n      if (!result.success) {\n        const formatted = formatZodError(result.errors)\n        throw new Error(\n          `[vite-env] Environment validation failed:\\n\\n${formatted}`,\n        )\n      }\n\n      lastValidated = result.data!\n\n      await generateDts(envDefinition, resolvedConfig.root)\n\n      const count = Object.keys(result.data ?? {}).length\n      resolvedConfig.logger.info(\n        `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m ${count} variables validated`,\n      )\n    },\n\n    resolveId(id) {\n      if (id === 'virtual:env/client')\n        return '\\0virtual:env/client'\n      if (id === 'virtual:env/server')\n        return '\\0virtual:env/server'\n    },\n\n    load(id) {\n      if (id === '\\0virtual:env/client')\n        return buildClientModule(envDefinition, lastValidated)\n      if (id === '\\0virtual:env/server')\n        return buildServerModule(envDefinition, lastValidated)\n    },\n\n    async generateBundle(_options, bundle) {\n      if (resolvedConfig.build.ssr)\n        return\n\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = validateEnv(envDefinition, rawEnv)\n\n      if (!result.success) {\n        const formatted = formatZodError(result.errors)\n        throw new Error(\n          `[vite-env] Env validation failed at bundle emit:\\n\\n${formatted}`,\n        )\n      }\n\n      const leaks = detectServerLeak(\n        envDefinition,\n        result.data || {},\n        bundle as Record<string, { type: string, code?: string }>,\n      )\n\n      if (leaks.length > 0) {\n        throw new Error(\n          `[vite-env] Server environment variables detected in client bundle!\\n\\n${leaks.map(l => `  ✗ ${l.key} found in ${l.chunk}`).join('\\n')\n          }\\n\\n  These variables are marked as server-only and must never reach the browser.`,\n        )\n      }\n    },\n\n    configureServer(server) {\n      const envDir = resolvedConfig.envDir || resolvedConfig.root\n      server.watcher.add(path.join(envDir, '.env*'))\n\n      let debounceTimer: ReturnType<typeof setTimeout>\n\n      server.watcher.on('change', async (file) => {\n        if (!path.basename(file).startsWith('.env'))\n          return\n\n        clearTimeout(debounceTimer)\n        debounceTimer = setTimeout(async () => {\n          const rawEnv = await loadEnvSources(resolvedConfig)\n          const result = validateEnv(envDefinition, rawEnv)\n\n          if (!result.success) {\n            const formatted = formatZodError(result.errors)\n            resolvedConfig.logger.warn(\n              `\\n  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidation failed:\\n${formatted}`,\n            )\n            return\n          }\n\n          lastValidated = result.data!\n\n          const clientMod = server.moduleGraph.getModuleById('\\0virtual:env/client')\n          if (clientMod) {\n            server.moduleGraph.invalidateModule(clientMod)\n            server.hot.send({ type: 'full-reload' })\n            resolvedConfig.logger.info(\n              `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidated`,\n            )\n          }\n        }, 150) // 150ms debounce\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAeA,eAAsB,eACpB,QACiC;AAOjC,QAAO;EACL,IAAA,GAAA,KAAA,SANA,OAAO,MACP,OAAO,UAAU,OAAO,MACxB,GACD;EAIC,GAAG,cAAcA,aAAAA,QAAQ,IAAI;EAC9B;;AAGH,SAAS,cAAc,KAAgD;AACrE,QAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,QACjB,UAAqC,OAAO,MAAM,OAAO,SAC3D,CACF;;;;ACjCH,SAAgB,kBACd,KACA,MACoC;CACpC,MAAM,aAAa,IAAI,IAAI,CACzB,GAAG,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,EAChC,GAAG,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CACjC,CAAC;CAEF,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC,CACxD;AAED,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;;EAEpE;;AAGH,SAAgB,kBACd,MACA,MACoC;AACpC,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAE9D;;;;ACZH,SAAwB,QAAQ,UAA0B,EAAE,EAAU;CACpE,IAAI;CACJ,IAAI;CACJ,IAAI,gBAAyC,EAAE;AAE/C,QAAO;EACL,MAAM;EACN,SAAS;EAET,MAAM,eAAe,QAAQ;AAC3B,oBAAiB;GAEjB,MAAM,aAAaC,UAAAA,QAAK,QACtB,OAAO,MACP,QAAQ,cAAc,SACvB;AAED,OAAI;AACF,oBAAgB,MAAMC,eAAAA,cAAc,WAAW;YAE1C,GAAG;AACR,UAAM,IAAI,MACR,qDAAqD,WAAW,kEAEhE,EAAE,OAAO,GAAG,CACb;;;EAIL,MAAM,aAAa;GACjB,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAASC,eAAAA,YAAY,eAAe,OAAO;AAEjD,OAAI,CAAC,OAAO,SAAS;IACnB,MAAM,YAAYC,eAAAA,eAAe,OAAO,OAAO;AAC/C,UAAM,IAAI,MACR,gDAAgD,YACjD;;AAGH,mBAAgB,OAAO;AAEvB,SAAMC,YAAAA,YAAY,eAAe,eAAe,KAAK;GAErD,MAAM,QAAQ,OAAO,KAAK,OAAO,QAAQ,EAAE,CAAC,CAAC;AAC7C,kBAAe,OAAO,KACpB,gDAAgD,MAAM,sBACvD;;EAGH,UAAU,IAAI;AACZ,OAAI,OAAO,qBACT,QAAO;AACT,OAAI,OAAO,qBACT,QAAO;;EAGX,KAAK,IAAI;AACP,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;AACxD,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;;EAG1D,MAAM,eAAe,UAAU,QAAQ;AACrC,OAAI,eAAe,MAAM,IACvB;GAEF,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAASF,eAAAA,YAAY,eAAe,OAAO;AAEjD,OAAI,CAAC,OAAO,SAAS;IACnB,MAAM,YAAYC,eAAAA,eAAe,OAAO,OAAO;AAC/C,UAAM,IAAI,MACR,uDAAuD,YACxD;;GAGH,MAAM,QAAQE,aAAAA,iBACZ,eACA,OAAO,QAAQ,EAAE,EACjB,OACD;AAED,OAAI,MAAM,SAAS,EACjB,OAAM,IAAI,MACR,yEAAyE,MAAM,KAAI,MAAK,OAAO,EAAE,IAAI,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK,CACrI,mFACF;;EAIL,gBAAgB,QAAQ;GACtB,MAAM,SAAS,eAAe,UAAU,eAAe;AACvD,UAAO,QAAQ,IAAIL,UAAAA,QAAK,KAAK,QAAQ,QAAQ,CAAC;GAE9C,IAAI;AAEJ,UAAO,QAAQ,GAAG,UAAU,OAAO,SAAS;AAC1C,QAAI,CAACA,UAAAA,QAAK,SAAS,KAAK,CAAC,WAAW,OAAO,CACzC;AAEF,iBAAa,cAAc;AAC3B,oBAAgB,WAAW,YAAY;KACrC,MAAM,SAAS,MAAM,eAAe,eAAe;KACnD,MAAM,SAASE,eAAAA,YAAY,eAAe,OAAO;AAEjD,SAAI,CAAC,OAAO,SAAS;MACnB,MAAM,YAAYC,eAAAA,eAAe,OAAO,OAAO;AAC/C,qBAAe,OAAO,KACpB,4EAA4E,YAC7E;AACD;;AAGF,qBAAgB,OAAO;KAEvB,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;AAC1E,SAAI,WAAW;AACb,aAAO,YAAY,iBAAiB,UAAU;AAC9C,aAAO,IAAI,KAAK,EAAE,MAAM,eAAe,CAAC;AACxC,qBAAe,OAAO,KACpB,+DACD;;OAEF,IAAI;KACP;;EAEL"}
+{"version":3,"file":"plugin.cjs","names":["process","path","loadEnvConfig","validateEnv","formatZodError","generateDts","detectServerLeak"],"sources":["../src/sources.ts","../src/virtual.ts","../src/plugin.ts"],"sourcesContent":["// @env node\nimport type { ResolvedConfig } from 'vite'\nimport process from 'node:process'\nimport { loadEnv } from 'vite'\n\n/**\n * Merge priority (highest → lowest):\n *   1. process.env        (CI pipeline secrets win)\n *   2. .env.[mode].local\n *   3. .env.[mode]\n *   4. .env.local\n *   5. .env\n *\n * Prefix '' = load everything, schema decides what's valid.\n */\nexport async function loadEnvSources(\n  config: ResolvedConfig,\n): Promise<Record<string, string>> {\n  const fileEnv = loadEnv(\n    config.mode,\n    config.envDir || config.root,\n    '', // no prefix filter — schema is the filter\n  )\n\n  return {\n    ...fileEnv,\n    ...filterStrings(process.env),\n  }\n}\n\nfunction filterStrings(env: NodeJS.ProcessEnv): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(env).filter(\n      (entry): entry is [string, string] => typeof entry[1] === 'string',\n    ),\n  )\n}\n","import type { EnvDefinition } from './types'\n\nexport function buildClientModule(\n  def: EnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  const clientKeys = new Set(Object.keys(def.client ?? {}))\n\n  const clientData = Object.fromEntries(\n    Object.entries(data).filter(([k]) => clientKeys.has(k)),\n  )\n\n  return {\n    moduleType: 'js', // Required: Vite 8 / Rolldown explicit moduleType\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(clientData, null, 2)});\nexport default env;`,\n  }\n}\n\nexport function buildServerModule(\n  _def: EnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(data, null, 2)});\nexport default env;`,\n  }\n}\n","// @env node\nimport type { Plugin, ResolvedConfig } from 'vite'\nimport type { EnvDefinition } from './types'\nimport path from 'node:path'\nimport { loadEnvConfig } from './config'\nimport { generateDts } from './dts'\nimport { formatZodError } from './format'\nimport { detectServerLeak } from './leak'\nimport { validateEnv } from './schema'\nimport { loadEnvSources } from './sources'\nimport { buildClientModule, buildServerModule } from './virtual'\n\nexport interface ViteEnvOptions {\n  /**\n   * Path to env definition file.\n   * @default './env.ts' (resolved from project root)\n   */\n  configFile?: string\n}\n\nexport default function ViteEnv(options: ViteEnvOptions = {}): Plugin {\n  let resolvedConfig: ResolvedConfig\n  let envDefinition: EnvDefinition\n  let lastValidated: Record<string, unknown> = {}\n\n  return {\n    name: 'vite-env',\n    enforce: 'pre',\n\n    async configResolved(config) {\n      resolvedConfig = config\n\n      const configPath = path.resolve(\n        config.root,\n        options.configFile ?? 'env.ts',\n      )\n\n      try {\n        envDefinition = await loadEnvConfig(configPath)\n      }\n      catch (e) {\n        throw new Error(\n          `[vite-env] Could not load env definition file at: ${configPath}\\n`\n          + `  Create an env.ts file and export default defineEnv({ ... })`,\n          { cause: e },\n        )\n      }\n    },\n\n    async buildStart() {\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = validateEnv(envDefinition, rawEnv)\n\n      if (!result.success) {\n        const formatted = formatZodError(result.errors)\n        throw new Error(\n          `[vite-env] Environment validation failed:\\n\\n${formatted}`,\n        )\n      }\n\n      lastValidated = result.data\n\n      await generateDts(envDefinition, resolvedConfig.root)\n\n      const count = Object.keys(result.data).length\n      resolvedConfig.logger.info(\n        `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m ${count} variables validated`,\n      )\n    },\n\n    resolveId(id) {\n      if (id === 'virtual:env/client')\n        return '\\0virtual:env/client'\n      if (id === 'virtual:env/server')\n        return '\\0virtual:env/server'\n    },\n\n    load(id) {\n      if (id === '\\0virtual:env/client')\n        return buildClientModule(envDefinition, lastValidated)\n      if (id === '\\0virtual:env/server')\n        return buildServerModule(envDefinition, lastValidated)\n    },\n\n    generateBundle(_options, bundle) {\n      if (resolvedConfig.build.ssr)\n        return\n\n      const leaks = detectServerLeak(\n        envDefinition,\n        lastValidated,\n        bundle as Record<string, { type: string, code?: string }>,\n        (keys) => {\n          resolvedConfig.logger.warn(\n            `  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(', ')}`,\n          )\n        },\n      )\n\n      if (leaks.length > 0) {\n        throw new Error(\n          `[vite-env] Server environment variables detected in client bundle!\\n\\n${leaks.map(l => `  ✗ ${l.key} found in ${l.chunk}`).join('\\n')\n          }\\n\\n  These variables are marked as server-only and must never reach the browser.`,\n        )\n      }\n    },\n\n    configureServer(server) {\n      const envDir = resolvedConfig.envDir || resolvedConfig.root\n      server.watcher.add(path.join(envDir, '.env*'))\n\n      let debounceTimer: ReturnType<typeof setTimeout>\n\n      server.watcher.on('change', async (file) => {\n        if (!path.basename(file).startsWith('.env'))\n          return\n\n        clearTimeout(debounceTimer)\n        debounceTimer = setTimeout(async () => {\n          try {\n            const rawEnv = await loadEnvSources(resolvedConfig)\n            const result = validateEnv(envDefinition, rawEnv)\n\n            if (!result.success) {\n              const formatted = formatZodError(result.errors)\n              resolvedConfig.logger.warn(\n                `\\n  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidation failed:\\n${formatted}`,\n              )\n              return\n            }\n\n            lastValidated = result.data\n\n            const clientMod = server.moduleGraph.getModuleById('\\0virtual:env/client')\n            const serverMod = server.moduleGraph.getModuleById('\\0virtual:env/server')\n            if (clientMod)\n              server.moduleGraph.invalidateModule(clientMod)\n            if (serverMod)\n              server.moduleGraph.invalidateModule(serverMod)\n            if (clientMod || serverMod) {\n              server.hot.send({ type: 'full-reload' })\n              resolvedConfig.logger.info(\n                `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidated`,\n              )\n            }\n          }\n          catch (e) {\n            resolvedConfig.logger.error(\n              `\\n  \\x1B[31m✗\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Failed to reload env files: ${e instanceof Error ? e.message : String(e)}`,\n            )\n          }\n        }, 150) // 150ms debounce\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAeA,eAAsB,eACpB,QACiC;AAOjC,QAAO;EACL,IAAA,GAAA,KAAA,SANA,OAAO,MACP,OAAO,UAAU,OAAO,MACxB,GACD;EAIC,GAAG,cAAcA,aAAAA,QAAQ,IAAI;EAC9B;;AAGH,SAAS,cAAc,KAAgD;AACrE,QAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,QACjB,UAAqC,OAAO,MAAM,OAAO,SAC3D,CACF;;;;ACjCH,SAAgB,kBACd,KACA,MACoC;CACpC,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC,CACxD;AAED,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;;EAEpE;;AAGH,SAAgB,kBACd,MACA,MACoC;AACpC,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAE9D;;;;ACTH,SAAwB,QAAQ,UAA0B,EAAE,EAAU;CACpE,IAAI;CACJ,IAAI;CACJ,IAAI,gBAAyC,EAAE;AAE/C,QAAO;EACL,MAAM;EACN,SAAS;EAET,MAAM,eAAe,QAAQ;AAC3B,oBAAiB;GAEjB,MAAM,aAAaC,UAAAA,QAAK,QACtB,OAAO,MACP,QAAQ,cAAc,SACvB;AAED,OAAI;AACF,oBAAgB,MAAMC,eAAAA,cAAc,WAAW;YAE1C,GAAG;AACR,UAAM,IAAI,MACR,qDAAqD,WAAW,kEAEhE,EAAE,OAAO,GAAG,CACb;;;EAIL,MAAM,aAAa;GACjB,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAASC,eAAAA,YAAY,eAAe,OAAO;AAEjD,OAAI,CAAC,OAAO,SAAS;IACnB,MAAM,YAAYC,eAAAA,eAAe,OAAO,OAAO;AAC/C,UAAM,IAAI,MACR,gDAAgD,YACjD;;AAGH,mBAAgB,OAAO;AAEvB,SAAMC,YAAAA,YAAY,eAAe,eAAe,KAAK;GAErD,MAAM,QAAQ,OAAO,KAAK,OAAO,KAAK,CAAC;AACvC,kBAAe,OAAO,KACpB,gDAAgD,MAAM,sBACvD;;EAGH,UAAU,IAAI;AACZ,OAAI,OAAO,qBACT,QAAO;AACT,OAAI,OAAO,qBACT,QAAO;;EAGX,KAAK,IAAI;AACP,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;AACxD,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;;EAG1D,eAAe,UAAU,QAAQ;AAC/B,OAAI,eAAe,MAAM,IACvB;GAEF,MAAM,QAAQC,aAAAA,iBACZ,eACA,eACA,SACC,SAAS;AACR,mBAAe,OAAO,KACpB,uEAAuE,KAAK,OAAO,wDAAwD,KAAK,KAAK,KAAK,GAC3J;KAEJ;AAED,OAAI,MAAM,SAAS,EACjB,OAAM,IAAI,MACR,yEAAyE,MAAM,KAAI,MAAK,OAAO,EAAE,IAAI,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK,CACrI,mFACF;;EAIL,gBAAgB,QAAQ;GACtB,MAAM,SAAS,eAAe,UAAU,eAAe;AACvD,UAAO,QAAQ,IAAIL,UAAAA,QAAK,KAAK,QAAQ,QAAQ,CAAC;GAE9C,IAAI;AAEJ,UAAO,QAAQ,GAAG,UAAU,OAAO,SAAS;AAC1C,QAAI,CAACA,UAAAA,QAAK,SAAS,KAAK,CAAC,WAAW,OAAO,CACzC;AAEF,iBAAa,cAAc;AAC3B,oBAAgB,WAAW,YAAY;AACrC,SAAI;MACF,MAAM,SAAS,MAAM,eAAe,eAAe;MACnD,MAAM,SAASE,eAAAA,YAAY,eAAe,OAAO;AAEjD,UAAI,CAAC,OAAO,SAAS;OACnB,MAAM,YAAYC,eAAAA,eAAe,OAAO,OAAO;AAC/C,sBAAe,OAAO,KACpB,4EAA4E,YAC7E;AACD;;AAGF,sBAAgB,OAAO;MAEvB,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;MAC1E,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;AAC1E,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,aAAa,WAAW;AAC1B,cAAO,IAAI,KAAK,EAAE,MAAM,eAAe,CAAC;AACxC,sBAAe,OAAO,KACpB,+DACD;;cAGE,GAAG;AACR,qBAAe,OAAO,MACpB,8EAA8E,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GACzH;;OAEF,IAAI;KACP;;EAEL"}

package/dist/plugin.mjs

@@ -29,7 +29,7 @@ function filterStrings(env) {
 //#endregion
 //#region src/virtual.ts
 function buildClientModule(def, data) {
-	const clientKeys = new Set([...Object.keys(def.client ?? {}), ...Object.keys(def.shared ?? {})]);
+	const clientKeys = new Set(Object.keys(def.client ?? {}));
 	const clientData = Object.fromEntries(Object.entries(data).filter(([k]) => clientKeys.has(k)));
 	return {
 		moduleType: "js",
@@ -73,7 +73,7 @@ function ViteEnv(options = {}) {
 			}
 			lastValidated = result.data;
 			await generateDts(envDefinition, resolvedConfig.root);
-			const count = Object.keys(result.data ?? {}).length;
+			const count = Object.keys(result.data).length;
 			resolvedConfig.logger.info(`  \x1B[32m✓\x1B[0m \x1B[36m[vite-env]\x1B[0m ${count} variables validated`);
 		},
 		resolveId(id) {
@@ -84,15 +84,11 @@ function ViteEnv(options = {}) {
 			if (id === "\0virtual:env/client") return buildClientModule(envDefinition, lastValidated);
 			if (id === "\0virtual:env/server") return buildServerModule(envDefinition, lastValidated);
 		},
-		async generateBundle(_options, bundle) {
+		generateBundle(_options, bundle) {
 			if (resolvedConfig.build.ssr) return;
-			const rawEnv = await loadEnvSources(resolvedConfig);
-			const result = validateEnv(envDefinition, rawEnv);
-			if (!result.success) {
-				const formatted = formatZodError(result.errors);
-				throw new Error(`[vite-env] Env validation failed at bundle emit:\n\n${formatted}`);
-			}
-			const leaks = detectServerLeak(envDefinition, result.data || {}, bundle);
+			const leaks = detectServerLeak(envDefinition, lastValidated, bundle, (keys) => {
+				resolvedConfig.logger.warn(`  \x1B[33m⚠\x1B[0m \x1B[36m[vite-env]\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(", ")}`);
+			});
 			if (leaks.length > 0) throw new Error(`[vite-env] Server environment variables detected in client bundle!\n\n${leaks.map((l) => `  ✗ ${l.key} found in ${l.chunk}`).join("\n")}\n\n  These variables are marked as server-only and must never reach the browser.`);
 		},
 		configureServer(server) {
@@ -103,19 +99,25 @@ function ViteEnv(options = {}) {
 				if (!path.basename(file).startsWith(".env")) return;
 				clearTimeout(debounceTimer);
 				debounceTimer = setTimeout(async () => {
-					const rawEnv = await loadEnvSources(resolvedConfig);
-					const result = validateEnv(envDefinition, rawEnv);
-					if (!result.success) {
-						const formatted = formatZodError(result.errors);
-						resolvedConfig.logger.warn(`\n  \x1B[33m⚠\x1B[0m \x1B[36m[vite-env]\x1B[0m Env revalidation failed:\n${formatted}`);
-						return;
-					}
-					lastValidated = result.data;
-					const clientMod = server.moduleGraph.getModuleById("\0virtual:env/client");
-					if (clientMod) {
-						server.moduleGraph.invalidateModule(clientMod);
-						server.hot.send({ type: "full-reload" });
-						resolvedConfig.logger.info(`  \x1B[32m✓\x1B[0m \x1B[36m[vite-env]\x1B[0m Env revalidated`);
+					try {
+						const rawEnv = await loadEnvSources(resolvedConfig);
+						const result = validateEnv(envDefinition, rawEnv);
+						if (!result.success) {
+							const formatted = formatZodError(result.errors);
+							resolvedConfig.logger.warn(`\n  \x1B[33m⚠\x1B[0m \x1B[36m[vite-env]\x1B[0m Env revalidation failed:\n${formatted}`);
+							return;
+						}
+						lastValidated = result.data;
+						const clientMod = server.moduleGraph.getModuleById("\0virtual:env/client");
+						const serverMod = server.moduleGraph.getModuleById("\0virtual:env/server");
+						if (clientMod) server.moduleGraph.invalidateModule(clientMod);
+						if (serverMod) server.moduleGraph.invalidateModule(serverMod);
+						if (clientMod || serverMod) {
+							server.hot.send({ type: "full-reload" });
+							resolvedConfig.logger.info(`  \x1B[32m✓\x1B[0m \x1B[36m[vite-env]\x1B[0m Env revalidated`);
+						}
+					} catch (e) {
+						resolvedConfig.logger.error(`\n  \x1B[31m✗\x1B[0m \x1B[36m[vite-env]\x1B[0m Failed to reload env files: ${e instanceof Error ? e.message : String(e)}`);
 					}
 				}, 150);
 			});

package/dist/plugin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.mjs","names":[],"sources":["../src/sources.ts","../src/virtual.ts","../src/plugin.ts"],"sourcesContent":["// @env node\nimport type { ResolvedConfig } from 'vite'\nimport process from 'node:process'\nimport { loadEnv } from 'vite'\n\n/**\n * Merge priority (highest → lowest):\n *   1. process.env        (CI pipeline secrets win)\n *   2. .env.[mode].local\n *   3. .env.[mode]\n *   4. .env.local\n *   5. .env\n *\n * Prefix '' = load everything, schema decides what's valid.\n */\nexport async function loadEnvSources(\n  config: ResolvedConfig,\n): Promise<Record<string, string>> {\n  const fileEnv = loadEnv(\n    config.mode,\n    config.envDir || config.root,\n    '', // no prefix filter — schema is the filter\n  )\n\n  return {\n    ...fileEnv,\n    ...filterStrings(process.env),\n  }\n}\n\nfunction filterStrings(env: NodeJS.ProcessEnv): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(env).filter(\n      (entry): entry is [string, string] => typeof entry[1] === 'string',\n    ),\n  )\n}\n","import type { EnvDefinition } from './types'\n\nexport function buildClientModule(\n  def: EnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  const clientKeys = new Set([\n    ...Object.keys(def.client ?? {}),\n    ...Object.keys(def.shared ?? {}),\n  ])\n\n  const clientData = Object.fromEntries(\n    Object.entries(data).filter(([k]) => clientKeys.has(k)),\n  )\n\n  return {\n    moduleType: 'js', // Required: Vite 8 / Rolldown explicit moduleType\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(clientData, null, 2)});\nexport default env;`,\n  }\n}\n\nexport function buildServerModule(\n  _def: EnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(data, null, 2)});\nexport default env;`,\n  }\n}\n","// @env node\nimport type { Plugin, ResolvedConfig } from 'vite'\nimport type { EnvDefinition } from './types'\nimport path from 'node:path'\nimport { loadEnvConfig } from './config'\nimport { generateDts } from './dts'\nimport { formatZodError } from './format'\nimport { detectServerLeak } from './leak'\nimport { validateEnv } from './schema'\nimport { loadEnvSources } from './sources'\nimport { buildClientModule, buildServerModule } from './virtual'\n\nexport interface ViteEnvOptions {\n  /**\n   * Path to env definition file.\n   * @default './env.ts' (resolved from project root)\n   */\n  configFile?: string\n}\n\nexport default function ViteEnv(options: ViteEnvOptions = {}): Plugin {\n  let resolvedConfig: ResolvedConfig\n  let envDefinition: EnvDefinition\n  let lastValidated: Record<string, unknown> = {}\n\n  return {\n    name: 'vite-env',\n    enforce: 'pre',\n\n    async configResolved(config) {\n      resolvedConfig = config\n\n      const configPath = path.resolve(\n        config.root,\n        options.configFile ?? 'env.ts',\n      )\n\n      try {\n        envDefinition = await loadEnvConfig(configPath)\n      }\n      catch (e) {\n        throw new Error(\n          `[vite-env] Could not load env definition file at: ${configPath}\\n`\n          + `  Create an env.ts file and export default defineEnv({ ... })`,\n          { cause: e },\n        )\n      }\n    },\n\n    async buildStart() {\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = validateEnv(envDefinition, rawEnv)\n\n      if (!result.success) {\n        const formatted = formatZodError(result.errors)\n        throw new Error(\n          `[vite-env] Environment validation failed:\\n\\n${formatted}`,\n        )\n      }\n\n      lastValidated = result.data!\n\n      await generateDts(envDefinition, resolvedConfig.root)\n\n      const count = Object.keys(result.data ?? {}).length\n      resolvedConfig.logger.info(\n        `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m ${count} variables validated`,\n      )\n    },\n\n    resolveId(id) {\n      if (id === 'virtual:env/client')\n        return '\\0virtual:env/client'\n      if (id === 'virtual:env/server')\n        return '\\0virtual:env/server'\n    },\n\n    load(id) {\n      if (id === '\\0virtual:env/client')\n        return buildClientModule(envDefinition, lastValidated)\n      if (id === '\\0virtual:env/server')\n        return buildServerModule(envDefinition, lastValidated)\n    },\n\n    async generateBundle(_options, bundle) {\n      if (resolvedConfig.build.ssr)\n        return\n\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = validateEnv(envDefinition, rawEnv)\n\n      if (!result.success) {\n        const formatted = formatZodError(result.errors)\n        throw new Error(\n          `[vite-env] Env validation failed at bundle emit:\\n\\n${formatted}`,\n        )\n      }\n\n      const leaks = detectServerLeak(\n        envDefinition,\n        result.data || {},\n        bundle as Record<string, { type: string, code?: string }>,\n      )\n\n      if (leaks.length > 0) {\n        throw new Error(\n          `[vite-env] Server environment variables detected in client bundle!\\n\\n${leaks.map(l => `  ✗ ${l.key} found in ${l.chunk}`).join('\\n')\n          }\\n\\n  These variables are marked as server-only and must never reach the browser.`,\n        )\n      }\n    },\n\n    configureServer(server) {\n      const envDir = resolvedConfig.envDir || resolvedConfig.root\n      server.watcher.add(path.join(envDir, '.env*'))\n\n      let debounceTimer: ReturnType<typeof setTimeout>\n\n      server.watcher.on('change', async (file) => {\n        if (!path.basename(file).startsWith('.env'))\n          return\n\n        clearTimeout(debounceTimer)\n        debounceTimer = setTimeout(async () => {\n          const rawEnv = await loadEnvSources(resolvedConfig)\n          const result = validateEnv(envDefinition, rawEnv)\n\n          if (!result.success) {\n            const formatted = formatZodError(result.errors)\n            resolvedConfig.logger.warn(\n              `\\n  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidation failed:\\n${formatted}`,\n            )\n            return\n          }\n\n          lastValidated = result.data!\n\n          const clientMod = server.moduleGraph.getModuleById('\\0virtual:env/client')\n          if (clientMod) {\n            server.moduleGraph.invalidateModule(clientMod)\n            server.hot.send({ type: 'full-reload' })\n            resolvedConfig.logger.info(\n              `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidated`,\n            )\n          }\n        }, 150) // 150ms debounce\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAeA,eAAsB,eACpB,QACiC;AAOjC,QAAO;EACL,GAPc,QACd,OAAO,MACP,OAAO,UAAU,OAAO,MACxB,GACD;EAIC,GAAG,cAAc,QAAQ,IAAI;EAC9B;;AAGH,SAAS,cAAc,KAAgD;AACrE,QAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,QACjB,UAAqC,OAAO,MAAM,OAAO,SAC3D,CACF;;;;ACjCH,SAAgB,kBACd,KACA,MACoC;CACpC,MAAM,aAAa,IAAI,IAAI,CACzB,GAAG,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,EAChC,GAAG,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CACjC,CAAC;CAEF,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC,CACxD;AAED,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;;EAEpE;;AAGH,SAAgB,kBACd,MACA,MACoC;AACpC,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAE9D;;;;ACZH,SAAwB,QAAQ,UAA0B,EAAE,EAAU;CACpE,IAAI;CACJ,IAAI;CACJ,IAAI,gBAAyC,EAAE;AAE/C,QAAO;EACL,MAAM;EACN,SAAS;EAET,MAAM,eAAe,QAAQ;AAC3B,oBAAiB;GAEjB,MAAM,aAAa,KAAK,QACtB,OAAO,MACP,QAAQ,cAAc,SACvB;AAED,OAAI;AACF,oBAAgB,MAAM,cAAc,WAAW;YAE1C,GAAG;AACR,UAAM,IAAI,MACR,qDAAqD,WAAW,kEAEhE,EAAE,OAAO,GAAG,CACb;;;EAIL,MAAM,aAAa;GACjB,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAAS,YAAY,eAAe,OAAO;AAEjD,OAAI,CAAC,OAAO,SAAS;IACnB,MAAM,YAAY,eAAe,OAAO,OAAO;AAC/C,UAAM,IAAI,MACR,gDAAgD,YACjD;;AAGH,mBAAgB,OAAO;AAEvB,SAAM,YAAY,eAAe,eAAe,KAAK;GAErD,MAAM,QAAQ,OAAO,KAAK,OAAO,QAAQ,EAAE,CAAC,CAAC;AAC7C,kBAAe,OAAO,KACpB,gDAAgD,MAAM,sBACvD;;EAGH,UAAU,IAAI;AACZ,OAAI,OAAO,qBACT,QAAO;AACT,OAAI,OAAO,qBACT,QAAO;;EAGX,KAAK,IAAI;AACP,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;AACxD,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;;EAG1D,MAAM,eAAe,UAAU,QAAQ;AACrC,OAAI,eAAe,MAAM,IACvB;GAEF,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAAS,YAAY,eAAe,OAAO;AAEjD,OAAI,CAAC,OAAO,SAAS;IACnB,MAAM,YAAY,eAAe,OAAO,OAAO;AAC/C,UAAM,IAAI,MACR,uDAAuD,YACxD;;GAGH,MAAM,QAAQ,iBACZ,eACA,OAAO,QAAQ,EAAE,EACjB,OACD;AAED,OAAI,MAAM,SAAS,EACjB,OAAM,IAAI,MACR,yEAAyE,MAAM,KAAI,MAAK,OAAO,EAAE,IAAI,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK,CACrI,mFACF;;EAIL,gBAAgB,QAAQ;GACtB,MAAM,SAAS,eAAe,UAAU,eAAe;AACvD,UAAO,QAAQ,IAAI,KAAK,KAAK,QAAQ,QAAQ,CAAC;GAE9C,IAAI;AAEJ,UAAO,QAAQ,GAAG,UAAU,OAAO,SAAS;AAC1C,QAAI,CAAC,KAAK,SAAS,KAAK,CAAC,WAAW,OAAO,CACzC;AAEF,iBAAa,cAAc;AAC3B,oBAAgB,WAAW,YAAY;KACrC,MAAM,SAAS,MAAM,eAAe,eAAe;KACnD,MAAM,SAAS,YAAY,eAAe,OAAO;AAEjD,SAAI,CAAC,OAAO,SAAS;MACnB,MAAM,YAAY,eAAe,OAAO,OAAO;AAC/C,qBAAe,OAAO,KACpB,4EAA4E,YAC7E;AACD;;AAGF,qBAAgB,OAAO;KAEvB,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;AAC1E,SAAI,WAAW;AACb,aAAO,YAAY,iBAAiB,UAAU;AAC9C,aAAO,IAAI,KAAK,EAAE,MAAM,eAAe,CAAC;AACxC,qBAAe,OAAO,KACpB,+DACD;;OAEF,IAAI;KACP;;EAEL"}
+{"version":3,"file":"plugin.mjs","names":[],"sources":["../src/sources.ts","../src/virtual.ts","../src/plugin.ts"],"sourcesContent":["// @env node\nimport type { ResolvedConfig } from 'vite'\nimport process from 'node:process'\nimport { loadEnv } from 'vite'\n\n/**\n * Merge priority (highest → lowest):\n *   1. process.env        (CI pipeline secrets win)\n *   2. .env.[mode].local\n *   3. .env.[mode]\n *   4. .env.local\n *   5. .env\n *\n * Prefix '' = load everything, schema decides what's valid.\n */\nexport async function loadEnvSources(\n  config: ResolvedConfig,\n): Promise<Record<string, string>> {\n  const fileEnv = loadEnv(\n    config.mode,\n    config.envDir || config.root,\n    '', // no prefix filter — schema is the filter\n  )\n\n  return {\n    ...fileEnv,\n    ...filterStrings(process.env),\n  }\n}\n\nfunction filterStrings(env: NodeJS.ProcessEnv): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(env).filter(\n      (entry): entry is [string, string] => typeof entry[1] === 'string',\n    ),\n  )\n}\n","import type { EnvDefinition } from './types'\n\nexport function buildClientModule(\n  def: EnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  const clientKeys = new Set(Object.keys(def.client ?? {}))\n\n  const clientData = Object.fromEntries(\n    Object.entries(data).filter(([k]) => clientKeys.has(k)),\n  )\n\n  return {\n    moduleType: 'js', // Required: Vite 8 / Rolldown explicit moduleType\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(clientData, null, 2)});\nexport default env;`,\n  }\n}\n\nexport function buildServerModule(\n  _def: EnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(data, null, 2)});\nexport default env;`,\n  }\n}\n","// @env node\nimport type { Plugin, ResolvedConfig } from 'vite'\nimport type { EnvDefinition } from './types'\nimport path from 'node:path'\nimport { loadEnvConfig } from './config'\nimport { generateDts } from './dts'\nimport { formatZodError } from './format'\nimport { detectServerLeak } from './leak'\nimport { validateEnv } from './schema'\nimport { loadEnvSources } from './sources'\nimport { buildClientModule, buildServerModule } from './virtual'\n\nexport interface ViteEnvOptions {\n  /**\n   * Path to env definition file.\n   * @default './env.ts' (resolved from project root)\n   */\n  configFile?: string\n}\n\nexport default function ViteEnv(options: ViteEnvOptions = {}): Plugin {\n  let resolvedConfig: ResolvedConfig\n  let envDefinition: EnvDefinition\n  let lastValidated: Record<string, unknown> = {}\n\n  return {\n    name: 'vite-env',\n    enforce: 'pre',\n\n    async configResolved(config) {\n      resolvedConfig = config\n\n      const configPath = path.resolve(\n        config.root,\n        options.configFile ?? 'env.ts',\n      )\n\n      try {\n        envDefinition = await loadEnvConfig(configPath)\n      }\n      catch (e) {\n        throw new Error(\n          `[vite-env] Could not load env definition file at: ${configPath}\\n`\n          + `  Create an env.ts file and export default defineEnv({ ... })`,\n          { cause: e },\n        )\n      }\n    },\n\n    async buildStart() {\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = validateEnv(envDefinition, rawEnv)\n\n      if (!result.success) {\n        const formatted = formatZodError(result.errors)\n        throw new Error(\n          `[vite-env] Environment validation failed:\\n\\n${formatted}`,\n        )\n      }\n\n      lastValidated = result.data\n\n      await generateDts(envDefinition, resolvedConfig.root)\n\n      const count = Object.keys(result.data).length\n      resolvedConfig.logger.info(\n        `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m ${count} variables validated`,\n      )\n    },\n\n    resolveId(id) {\n      if (id === 'virtual:env/client')\n        return '\\0virtual:env/client'\n      if (id === 'virtual:env/server')\n        return '\\0virtual:env/server'\n    },\n\n    load(id) {\n      if (id === '\\0virtual:env/client')\n        return buildClientModule(envDefinition, lastValidated)\n      if (id === '\\0virtual:env/server')\n        return buildServerModule(envDefinition, lastValidated)\n    },\n\n    generateBundle(_options, bundle) {\n      if (resolvedConfig.build.ssr)\n        return\n\n      const leaks = detectServerLeak(\n        envDefinition,\n        lastValidated,\n        bundle as Record<string, { type: string, code?: string }>,\n        (keys) => {\n          resolvedConfig.logger.warn(\n            `  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(', ')}`,\n          )\n        },\n      )\n\n      if (leaks.length > 0) {\n        throw new Error(\n          `[vite-env] Server environment variables detected in client bundle!\\n\\n${leaks.map(l => `  ✗ ${l.key} found in ${l.chunk}`).join('\\n')\n          }\\n\\n  These variables are marked as server-only and must never reach the browser.`,\n        )\n      }\n    },\n\n    configureServer(server) {\n      const envDir = resolvedConfig.envDir || resolvedConfig.root\n      server.watcher.add(path.join(envDir, '.env*'))\n\n      let debounceTimer: ReturnType<typeof setTimeout>\n\n      server.watcher.on('change', async (file) => {\n        if (!path.basename(file).startsWith('.env'))\n          return\n\n        clearTimeout(debounceTimer)\n        debounceTimer = setTimeout(async () => {\n          try {\n            const rawEnv = await loadEnvSources(resolvedConfig)\n            const result = validateEnv(envDefinition, rawEnv)\n\n            if (!result.success) {\n              const formatted = formatZodError(result.errors)\n              resolvedConfig.logger.warn(\n                `\\n  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidation failed:\\n${formatted}`,\n              )\n              return\n            }\n\n            lastValidated = result.data\n\n            const clientMod = server.moduleGraph.getModuleById('\\0virtual:env/client')\n            const serverMod = server.moduleGraph.getModuleById('\\0virtual:env/server')\n            if (clientMod)\n              server.moduleGraph.invalidateModule(clientMod)\n            if (serverMod)\n              server.moduleGraph.invalidateModule(serverMod)\n            if (clientMod || serverMod) {\n              server.hot.send({ type: 'full-reload' })\n              resolvedConfig.logger.info(\n                `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidated`,\n              )\n            }\n          }\n          catch (e) {\n            resolvedConfig.logger.error(\n              `\\n  \\x1B[31m✗\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Failed to reload env files: ${e instanceof Error ? e.message : String(e)}`,\n            )\n          }\n        }, 150) // 150ms debounce\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAeA,eAAsB,eACpB,QACiC;AAOjC,QAAO;EACL,GAPc,QACd,OAAO,MACP,OAAO,UAAU,OAAO,MACxB,GACD;EAIC,GAAG,cAAc,QAAQ,IAAI;EAC9B;;AAGH,SAAS,cAAc,KAAgD;AACrE,QAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,QACjB,UAAqC,OAAO,MAAM,OAAO,SAC3D,CACF;;;;ACjCH,SAAgB,kBACd,KACA,MACoC;CACpC,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC,CACxD;AAED,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;;EAEpE;;AAGH,SAAgB,kBACd,MACA,MACoC;AACpC,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAE9D;;;;ACTH,SAAwB,QAAQ,UAA0B,EAAE,EAAU;CACpE,IAAI;CACJ,IAAI;CACJ,IAAI,gBAAyC,EAAE;AAE/C,QAAO;EACL,MAAM;EACN,SAAS;EAET,MAAM,eAAe,QAAQ;AAC3B,oBAAiB;GAEjB,MAAM,aAAa,KAAK,QACtB,OAAO,MACP,QAAQ,cAAc,SACvB;AAED,OAAI;AACF,oBAAgB,MAAM,cAAc,WAAW;YAE1C,GAAG;AACR,UAAM,IAAI,MACR,qDAAqD,WAAW,kEAEhE,EAAE,OAAO,GAAG,CACb;;;EAIL,MAAM,aAAa;GACjB,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAAS,YAAY,eAAe,OAAO;AAEjD,OAAI,CAAC,OAAO,SAAS;IACnB,MAAM,YAAY,eAAe,OAAO,OAAO;AAC/C,UAAM,IAAI,MACR,gDAAgD,YACjD;;AAGH,mBAAgB,OAAO;AAEvB,SAAM,YAAY,eAAe,eAAe,KAAK;GAErD,MAAM,QAAQ,OAAO,KAAK,OAAO,KAAK,CAAC;AACvC,kBAAe,OAAO,KACpB,gDAAgD,MAAM,sBACvD;;EAGH,UAAU,IAAI;AACZ,OAAI,OAAO,qBACT,QAAO;AACT,OAAI,OAAO,qBACT,QAAO;;EAGX,KAAK,IAAI;AACP,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;AACxD,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;;EAG1D,eAAe,UAAU,QAAQ;AAC/B,OAAI,eAAe,MAAM,IACvB;GAEF,MAAM,QAAQ,iBACZ,eACA,eACA,SACC,SAAS;AACR,mBAAe,OAAO,KACpB,uEAAuE,KAAK,OAAO,wDAAwD,KAAK,KAAK,KAAK,GAC3J;KAEJ;AAED,OAAI,MAAM,SAAS,EACjB,OAAM,IAAI,MACR,yEAAyE,MAAM,KAAI,MAAK,OAAO,EAAE,IAAI,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK,CACrI,mFACF;;EAIL,gBAAgB,QAAQ;GACtB,MAAM,SAAS,eAAe,UAAU,eAAe;AACvD,UAAO,QAAQ,IAAI,KAAK,KAAK,QAAQ,QAAQ,CAAC;GAE9C,IAAI;AAEJ,UAAO,QAAQ,GAAG,UAAU,OAAO,SAAS;AAC1C,QAAI,CAAC,KAAK,SAAS,KAAK,CAAC,WAAW,OAAO,CACzC;AAEF,iBAAa,cAAc;AAC3B,oBAAgB,WAAW,YAAY;AACrC,SAAI;MACF,MAAM,SAAS,MAAM,eAAe,eAAe;MACnD,MAAM,SAAS,YAAY,eAAe,OAAO;AAEjD,UAAI,CAAC,OAAO,SAAS;OACnB,MAAM,YAAY,eAAe,OAAO,OAAO;AAC/C,sBAAe,OAAO,KACpB,4EAA4E,YAC7E;AACD;;AAGF,sBAAgB,OAAO;MAEvB,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;MAC1E,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;AAC1E,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,aAAa,WAAW;AAC1B,cAAO,IAAI,KAAK,EAAE,MAAM,eAAe,CAAC;AACxC,sBAAe,OAAO,KACpB,+DACD;;cAGE,GAAG;AACR,qBAAe,OAAO,MACpB,8EAA8E,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GACzH;;OAEF,IAAI;KACP;;EAEL"}

package/dist/schema.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("./dts-DT7HjKrz.cjs");
+require("./dts-DF71HNdJ.cjs");
 let zod = require("zod");
 //#region src/schema.ts
 function defineEnv(definition) {
@@ -11,8 +11,7 @@ function defineEnv(definition) {
 function validateEnv(def, rawEnv) {
 	const combinedShape = {
 		...def.server,
-		...def.client,
-		...def.shared
+		...def.client
 	};
 	const result = zod.z.object(combinedShape).safeParse(rawEnv);
 	if (result.success) return {

package/dist/schema.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"schema.cjs","names":["z"],"sources":["../src/schema.ts"],"sourcesContent":["import type { EnvDefinition, ValidationResult } from './types'\nimport { z } from 'zod'\n\nexport function defineEnv(definition: EnvDefinition): EnvDefinition {\n  if (definition.client) {\n    for (const key of Object.keys(definition.client)) {\n      if (!key.startsWith('VITE_')) {\n        throw new Error(\n          `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n          + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n        )\n      }\n    }\n  }\n  return definition\n}\n\nexport function validateEnv(\n  def: EnvDefinition,\n  rawEnv: Record<string, string>,\n): ValidationResult {\n  const combinedShape = {\n    ...def.server,\n    ...def.client,\n    ...def.shared,\n  }\n\n  const schema = z.object(combinedShape)\n  const result = schema.safeParse(rawEnv)\n\n  if (result.success) {\n    return { success: true, data: result.data, errors: [] }\n  }\n\n  return {\n    success: false,\n    data: null,\n    errors: result.error.issues,\n  }\n}\n"],"mappings":";;;;AAGA,SAAgB,UAAU,YAA0C;AAClE,KAAI,WAAW;OACR,MAAM,OAAO,OAAO,KAAK,WAAW,OAAO,CAC9C,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;;AAIP,QAAO;;AAGT,SAAgB,YACd,KACA,QACkB;CAClB,MAAM,gBAAgB;EACpB,GAAG,IAAI;EACP,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAGD,MAAM,SADSA,IAAAA,EAAE,OAAO,cAAc,CAChB,UAAU,OAAO;AAEvC,KAAI,OAAO,QACT,QAAO;EAAE,SAAS;EAAM,MAAM,OAAO;EAAM,QAAQ,EAAE;EAAE;AAGzD,QAAO;EACL,SAAS;EACT,MAAM;EACN,QAAQ,OAAO,MAAM;EACtB"}
+{"version":3,"file":"schema.cjs","names":["z"],"sources":["../src/schema.ts"],"sourcesContent":["import type { EnvDefinition, ValidationResult } from './types'\nimport { z } from 'zod'\n\nexport function defineEnv<T extends EnvDefinition>(definition: T): T {\n  if (definition.client) {\n    for (const key of Object.keys(definition.client)) {\n      if (!key.startsWith('VITE_')) {\n        throw new Error(\n          `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n          + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n        )\n      }\n    }\n  }\n\n  return definition\n}\n\nexport function validateEnv(\n  def: EnvDefinition,\n  rawEnv: Record<string, string>,\n): ValidationResult {\n  const combinedShape = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const schema = z.object(combinedShape)\n  const result = schema.safeParse(rawEnv)\n\n  if (result.success) {\n    return { success: true, data: result.data, errors: [] as const }\n  }\n\n  return {\n    success: false,\n    data: null,\n    errors: result.error.issues,\n  }\n}\n"],"mappings":";;;;AAGA,SAAgB,UAAmC,YAAkB;AACnE,KAAI,WAAW;OACR,MAAM,OAAO,OAAO,KAAK,WAAW,OAAO,CAC9C,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;;AAKP,QAAO;;AAGT,SAAgB,YACd,KACA,QACkB;CAClB,MAAM,gBAAgB;EACpB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAGD,MAAM,SADSA,IAAAA,EAAE,OAAO,cAAc,CAChB,UAAU,OAAO;AAEvC,KAAI,OAAO,QACT,QAAO;EAAE,SAAS;EAAM,MAAM,OAAO;EAAM,QAAQ,EAAE;EAAW;AAGlE,QAAO;EACL,SAAS;EACT,MAAM;EACN,QAAQ,OAAO,MAAM;EACtB"}

package/dist/schema.d.cts

@@ -1,7 +1,7 @@
-import { i as ValidationResult, t as EnvDefinition } from "./types-BmEBJZdy.cjs";
+import { i as ValidationResult, t as EnvDefinition } from "./types-DqTMuWwc.cjs";
 
 //#region src/schema.d.ts
-declare function defineEnv(definition: EnvDefinition): EnvDefinition;
+declare function defineEnv<T extends EnvDefinition>(definition: T): T;
 declare function validateEnv(def: EnvDefinition, rawEnv: Record<string, string>): ValidationResult;
 //#endregion
 export { defineEnv, validateEnv };

package/dist/schema.d.mts

@@ -1,7 +1,7 @@
-import { i as ValidationResult, t as EnvDefinition } from "./types-CLfG9amO.mjs";
+import { i as ValidationResult, t as EnvDefinition } from "./types-CluiDKAQ.mjs";
 
 //#region src/schema.d.ts
-declare function defineEnv(definition: EnvDefinition): EnvDefinition;
+declare function defineEnv<T extends EnvDefinition>(definition: T): T;
 declare function validateEnv(def: EnvDefinition, rawEnv: Record<string, string>): ValidationResult;
 //#endregion
 export { defineEnv, validateEnv };

package/dist/schema.mjs

@@ -9,8 +9,7 @@ function defineEnv(definition) {
 function validateEnv(def, rawEnv) {
 	const combinedShape = {
 		...def.server,
-		...def.client,
-		...def.shared
+		...def.client
 	};
 	const result = z.object(combinedShape).safeParse(rawEnv);
 	if (result.success) return {

package/dist/schema.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"schema.mjs","names":[],"sources":["../src/schema.ts"],"sourcesContent":["import type { EnvDefinition, ValidationResult } from './types'\nimport { z } from 'zod'\n\nexport function defineEnv(definition: EnvDefinition): EnvDefinition {\n  if (definition.client) {\n    for (const key of Object.keys(definition.client)) {\n      if (!key.startsWith('VITE_')) {\n        throw new Error(\n          `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n          + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n        )\n      }\n    }\n  }\n  return definition\n}\n\nexport function validateEnv(\n  def: EnvDefinition,\n  rawEnv: Record<string, string>,\n): ValidationResult {\n  const combinedShape = {\n    ...def.server,\n    ...def.client,\n    ...def.shared,\n  }\n\n  const schema = z.object(combinedShape)\n  const result = schema.safeParse(rawEnv)\n\n  if (result.success) {\n    return { success: true, data: result.data, errors: [] }\n  }\n\n  return {\n    success: false,\n    data: null,\n    errors: result.error.issues,\n  }\n}\n"],"mappings":";;AAGA,SAAgB,UAAU,YAA0C;AAClE,KAAI,WAAW;OACR,MAAM,OAAO,OAAO,KAAK,WAAW,OAAO,CAC9C,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;;AAIP,QAAO;;AAGT,SAAgB,YACd,KACA,QACkB;CAClB,MAAM,gBAAgB;EACpB,GAAG,IAAI;EACP,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAGD,MAAM,SADS,EAAE,OAAO,cAAc,CAChB,UAAU,OAAO;AAEvC,KAAI,OAAO,QACT,QAAO;EAAE,SAAS;EAAM,MAAM,OAAO;EAAM,QAAQ,EAAE;EAAE;AAGzD,QAAO;EACL,SAAS;EACT,MAAM;EACN,QAAQ,OAAO,MAAM;EACtB"}
+{"version":3,"file":"schema.mjs","names":[],"sources":["../src/schema.ts"],"sourcesContent":["import type { EnvDefinition, ValidationResult } from './types'\nimport { z } from 'zod'\n\nexport function defineEnv<T extends EnvDefinition>(definition: T): T {\n  if (definition.client) {\n    for (const key of Object.keys(definition.client)) {\n      if (!key.startsWith('VITE_')) {\n        throw new Error(\n          `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n          + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n        )\n      }\n    }\n  }\n\n  return definition\n}\n\nexport function validateEnv(\n  def: EnvDefinition,\n  rawEnv: Record<string, string>,\n): ValidationResult {\n  const combinedShape = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const schema = z.object(combinedShape)\n  const result = schema.safeParse(rawEnv)\n\n  if (result.success) {\n    return { success: true, data: result.data, errors: [] as const }\n  }\n\n  return {\n    success: false,\n    data: null,\n    errors: result.error.issues,\n  }\n}\n"],"mappings":";;AAGA,SAAgB,UAAmC,YAAkB;AACnE,KAAI,WAAW;OACR,MAAM,OAAO,OAAO,KAAK,WAAW,OAAO,CAC9C,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;;AAKP,QAAO;;AAGT,SAAgB,YACd,KACA,QACkB;CAClB,MAAM,gBAAgB;EACpB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAGD,MAAM,SADS,EAAE,OAAO,cAAc,CAChB,UAAU,OAAO;AAEvC,KAAI,OAAO,QACT,QAAO;EAAE,SAAS;EAAM,MAAM,OAAO;EAAM,QAAQ,EAAE;EAAW;AAGlE,QAAO;EACL,SAAS;EACT,MAAM;EACN,QAAQ,OAAO,MAAM;EACtB"}

package/dist/{types-BmEBJZdy.d.cts → types-CluiDKAQ.d.mts}

@@ -4,15 +4,19 @@ import { z } from "zod";
 interface EnvDefinition {
   server?: z.ZodRawShape;
   client?: z.ZodRawShape;
-  shared?: z.ZodRawShape;
 }
-interface ValidationResult {
-  success: boolean;
-  data: Record<string, unknown> | null;
+type ValidationResult = {
+  success: true;
+  data: Record<string, unknown>;
+  errors: [];
+} | {
+  success: false;
+  data: null;
   errors: z.core.$ZodIssue[];
-}
-type InferClientEnv<T extends EnvDefinition> = z.infer<z.ZodObject<NonNullable<T['client']> & NonNullable<T['shared']>>>;
-type InferServerEnv<T extends EnvDefinition> = z.infer<z.ZodObject<NonNullable<T['server']> & NonNullable<T['client']> & NonNullable<T['shared']>>>;
+};
+type OrEmptyShape<T> = T extends z.ZodRawShape ? T : Record<string, never>;
+type InferClientEnv<T extends EnvDefinition> = z.infer<z.ZodObject<OrEmptyShape<T['client']>>>;
+type InferServerEnv<T extends EnvDefinition> = z.infer<z.ZodObject<OrEmptyShape<T['server']> & OrEmptyShape<T['client']>>>;
 //#endregion
 export { ValidationResult as i, InferClientEnv as n, InferServerEnv as r, EnvDefinition as t };
-//# sourceMappingURL=types-BmEBJZdy.d.cts.map
+//# sourceMappingURL=types-CluiDKAQ.d.mts.map

package/dist/{types-CLfG9amO.d.mts → types-DqTMuWwc.d.cts}

@@ -4,15 +4,19 @@ import { z } from "zod";
 interface EnvDefinition {
   server?: z.ZodRawShape;
   client?: z.ZodRawShape;
-  shared?: z.ZodRawShape;
 }
-interface ValidationResult {
-  success: boolean;
-  data: Record<string, unknown> | null;
+type ValidationResult = {
+  success: true;
+  data: Record<string, unknown>;
+  errors: [];
+} | {
+  success: false;
+  data: null;
   errors: z.core.$ZodIssue[];
-}
-type InferClientEnv<T extends EnvDefinition> = z.infer<z.ZodObject<NonNullable<T['client']> & NonNullable<T['shared']>>>;
-type InferServerEnv<T extends EnvDefinition> = z.infer<z.ZodObject<NonNullable<T['server']> & NonNullable<T['client']> & NonNullable<T['shared']>>>;
+};
+type OrEmptyShape<T> = T extends z.ZodRawShape ? T : Record<string, never>;
+type InferClientEnv<T extends EnvDefinition> = z.infer<z.ZodObject<OrEmptyShape<T['client']>>>;
+type InferServerEnv<T extends EnvDefinition> = z.infer<z.ZodObject<OrEmptyShape<T['server']> & OrEmptyShape<T['client']>>>;
 //#endregion
 export { ValidationResult as i, InferClientEnv as n, InferServerEnv as r, EnvDefinition as t };
-//# sourceMappingURL=types-CLfG9amO.d.mts.map
+//# sourceMappingURL=types-DqTMuWwc.d.cts.map

package/package.json

@@ -1,9 +1,26 @@
 {
   "name": "@vite-env/core",
   "type": "module",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "The env.ts layer for Vite — define once, validate everywhere, import with types",
   "license": "MIT",
+  "homepage": "https://github.com/pyyupsk/vite-env#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pyyupsk/vite-env.git",
+    "directory": "packages/core"
+  },
+  "keywords": [
+    "vite",
+    "vite-plugin",
+    "environment-variables",
+    "env",
+    "typescript",
+    "zod",
+    "validation",
+    "rolldown",
+    "dotenv"
+  ],
   "exports": {
     ".": {
       "import": {
@@ -81,6 +98,7 @@
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.cts",
   "files": [
+    "README.md",
     "dist"
   ],
   "engines": {

package/dist/dts-DT7HjKrz.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"dts-DT7HjKrz.cjs","names":["fs","path","z"],"sources":["../src/dts.ts"],"sourcesContent":["// @env node\nimport type { EnvDefinition } from './types'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { z } from 'zod'\n\n/**\n * Writes vite-env.d.ts to project root.\n * Declares virtual:env/client and virtual:env/server module types.\n * Users never need to manually augment ImportMetaEnv again.\n */\nexport async function generateDts(\n  def: EnvDefinition,\n  root: string,\n): Promise<void> {\n  const clientKeys = {\n    ...def.client,\n    ...def.shared,\n  }\n  const serverKeys = {\n    ...def.server,\n    ...def.client,\n    ...def.shared,\n  }\n\n  const clientFields = zodShapeToTsFields(clientKeys)\n  const serverFields = zodShapeToTsFields(serverKeys)\n\n  const dts = `// Auto-generated by @vite-env/core\n// Do not edit manually — re-generated on every dev server start and build\n\ndeclare module 'virtual:env/client' {\n  const env: {\n${clientFields}\n  }\n  export { env }\n  export default env\n}\n\ndeclare module 'virtual:env/server' {\n  const env: {\n${serverFields}\n  }\n  export { env }\n  export default env\n}\n`\n\n  await fs.writeFile(path.join(root, 'vite-env.d.ts'), dts, 'utf-8')\n}\n\nfunction zodShapeToTsFields(shape: z.ZodRawShape): string {\n  return Object.entries(shape)\n    .map(([key, schema]) => {\n      // Zod v4: ZodRawShape values are $ZodType, cast to ZodTypeAny for instanceof checks\n      const s = schema as unknown as z.ZodTypeAny\n      const tsType = zodToTs(s)\n      const optional = isOptional(s)\n      return `    readonly ${key}${optional ? '?' : ''}: ${tsType}`\n    })\n    .join('\\n')\n}\n\nfunction zodToTs(schema: z.ZodTypeAny): string {\n  if (schema instanceof z.ZodOptional)\n    return zodToTs(schema.unwrap() as unknown as z.ZodTypeAny)\n  if (schema instanceof z.ZodDefault)\n    return zodToTs(schema.def.innerType as unknown as z.ZodTypeAny)\n  if (schema instanceof z.ZodString)\n    return 'string'\n  if (schema instanceof z.ZodNumber)\n    return 'number'\n  if (schema instanceof z.ZodBoolean)\n    return 'boolean'\n  if (schema instanceof z.ZodEnum)\n    return (schema.options as string[]).map(o => `'${o}'`).join(' | ')\n  if (schema instanceof z.ZodPipe)\n    return zodToTs(schema.def.out as unknown as z.ZodTypeAny)\n  return 'string'\n}\n\nfunction isOptional(schema: z.ZodTypeAny): boolean {\n  return schema instanceof z.ZodOptional || schema instanceof z.ZodDefault\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,eAAsB,YACpB,KACA,MACe;CACf,MAAM,aAAa;EACjB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CACD,MAAM,aAAa;EACjB,GAAG,IAAI;EACP,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAKD,MAAM,MAAM;;;;;EAHS,mBAAmB,WAAW,CAQtC;;;;;;;;EAPQ,mBAAmB,WAAW,CAetC;;;;;;AAOb,OAAMA,iBAAAA,QAAG,UAAUC,UAAAA,QAAK,KAAK,MAAM,gBAAgB,EAAE,KAAK,QAAQ;;AAGpE,SAAS,mBAAmB,OAA8B;AACxD,QAAO,OAAO,QAAQ,MAAM,CACzB,KAAK,CAAC,KAAK,YAAY;EAEtB,MAAM,IAAI;EACV,MAAM,SAAS,QAAQ,EAAE;AAEzB,SAAO,gBAAgB,MADN,WAAW,EAAE,GACU,MAAM,GAAG,IAAI;GACrD,CACD,KAAK,KAAK;;AAGf,SAAS,QAAQ,QAA8B;AAC7C,KAAI,kBAAkBC,IAAAA,EAAE,YACtB,QAAO,QAAQ,OAAO,QAAQ,CAA4B;AAC5D,KAAI,kBAAkBA,IAAAA,EAAE,WACtB,QAAO,QAAQ,OAAO,IAAI,UAAqC;AACjE,KAAI,kBAAkBA,IAAAA,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkBA,IAAAA,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkBA,IAAAA,EAAE,WACtB,QAAO;AACT,KAAI,kBAAkBA,IAAAA,EAAE,QACtB,QAAQ,OAAO,QAAqB,KAAI,MAAK,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;AACpE,KAAI,kBAAkBA,IAAAA,EAAE,QACtB,QAAO,QAAQ,OAAO,IAAI,IAA+B;AAC3D,QAAO;;AAGT,SAAS,WAAW,QAA+B;AACjD,QAAO,kBAAkBA,IAAAA,EAAE,eAAe,kBAAkBA,IAAAA,EAAE"}