@vite-env/core 0.5.0 → 0.5.1

package/dist/config.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.cjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\nimport { createJiti } from 'jiti'\n\nexport async function loadEnvConfig(configPath: string): Promise<EnvDefinition> {\n  const jiti = createJiti(configPath)\n  const mod: Record<string, unknown> = await jiti.import(configPath) as any\n  const def: unknown = mod.default ?? mod\n\n  if (!def || typeof def !== 'object') {\n    throw new Error(\n      `[vite-env] env config at ${configPath} must export an object (got ${typeof def}).\\n`\n      + `  Use: export default defineEnv({ ... })`,\n    )\n  }\n\n  return def as EnvDefinition\n}\n"],"mappings":";;;;AAGA,eAAsB,cAAc,YAA4C;CAE9E,MAAM,MAA+B,OAAA,GAAA,KAAA,YADb,WAAW,CACa,OAAO,WAAW;CAClE,MAAM,MAAe,IAAI,WAAW;AAEpC,KAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,OAAM,IAAI,MACR,4BAA4B,WAAW,8BAA8B,OAAO,IAAI,8CAEjF;AAGH,QAAO"}
+{"version":3,"file":"config.cjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\nimport { createJiti } from 'jiti'\n\nexport async function loadEnvConfig(configPath: string): Promise<EnvDefinition> {\n  const jiti = createJiti(configPath)\n  const mod = await jiti.import<Record<string, unknown>>(configPath)\n  const def: unknown = mod.default ?? mod\n\n  if (!def || typeof def !== 'object') {\n    throw new Error(\n      `[vite-env] env config at ${configPath} must export an object (got ${typeof def}).\\n`\n      + `  Use: export default defineEnv({ ... })`,\n    )\n  }\n\n  return def as EnvDefinition\n}\n"],"mappings":";;;;AAGA,eAAsB,cAAc,YAA4C;CAE9E,MAAM,MAAM,OAAA,GAAA,KAAA,YADY,WAAW,CACZ,OAAgC,WAAW;CAClE,MAAM,MAAe,IAAI,WAAW;AAEpC,KAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,OAAM,IAAI,MACR,4BAA4B,WAAW,8BAA8B,OAAO,IAAI,8CAEjF;AAGH,QAAO"}

package/dist/config.d.cts

@@ -1,4 +1,4 @@
-import { n as EnvDefinition } from "./types-Bl3YdPck.cjs";
+import { n as EnvDefinition } from "./types-CpYkRwLM.cjs";
 
 //#region src/config.d.ts
 declare function loadEnvConfig(configPath: string): Promise<EnvDefinition>;

package/dist/config.d.mts

@@ -1,4 +1,4 @@
-import { n as EnvDefinition } from "./types-CUF5RARc.mjs";
+import { n as EnvDefinition } from "./types--Km3TAdJ.mjs";
 
 //#region src/config.d.ts
 declare function loadEnvConfig(configPath: string): Promise<EnvDefinition>;

package/dist/config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\nimport { createJiti } from 'jiti'\n\nexport async function loadEnvConfig(configPath: string): Promise<EnvDefinition> {\n  const jiti = createJiti(configPath)\n  const mod: Record<string, unknown> = await jiti.import(configPath) as any\n  const def: unknown = mod.default ?? mod\n\n  if (!def || typeof def !== 'object') {\n    throw new Error(\n      `[vite-env] env config at ${configPath} must export an object (got ${typeof def}).\\n`\n      + `  Use: export default defineEnv({ ... })`,\n    )\n  }\n\n  return def as EnvDefinition\n}\n"],"mappings":";;AAGA,eAAsB,cAAc,YAA4C;CAE9E,MAAM,MAA+B,MADxB,WAAW,WAAW,CACa,OAAO,WAAW;CAClE,MAAM,MAAe,IAAI,WAAW;AAEpC,KAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,OAAM,IAAI,MACR,4BAA4B,WAAW,8BAA8B,OAAO,IAAI,8CAEjF;AAGH,QAAO"}
+{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { EnvDefinition } from './types'\nimport { createJiti } from 'jiti'\n\nexport async function loadEnvConfig(configPath: string): Promise<EnvDefinition> {\n  const jiti = createJiti(configPath)\n  const mod = await jiti.import<Record<string, unknown>>(configPath)\n  const def: unknown = mod.default ?? mod\n\n  if (!def || typeof def !== 'object') {\n    throw new Error(\n      `[vite-env] env config at ${configPath} must export an object (got ${typeof def}).\\n`\n      + `  Use: export default defineEnv({ ... })`,\n    )\n  }\n\n  return def as EnvDefinition\n}\n"],"mappings":";;AAGA,eAAsB,cAAc,YAA4C;CAE9E,MAAM,MAAM,MADC,WAAW,WAAW,CACZ,OAAgC,WAAW;CAClE,MAAM,MAAe,IAAI,WAAW;AAEpC,KAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,OAAM,IAAI,MACR,4BAA4B,WAAW,8BAA8B,OAAO,IAAI,8CAEjF;AAGH,QAAO"}

package/dist/dts-BgHTl6hC.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"dts-BgHTl6hC.cjs","names":["path","fs"],"sources":["../src/dts.ts"],"sourcesContent":["// @env node\nimport type { EnvDefinition, StandardEnvDefinition } from './types'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\n\n/**\n * Writes vite-env.d.ts for Zod definitions.\n * Uses instanceof checks to infer TypeScript types from Zod schemas.\n * Zod is loaded dynamically so this module can be imported without zod installed.\n */\nexport async function generateDts(\n  def: EnvDefinition,\n  root: string,\n): Promise<void> {\n  const { z } = await import('zod')\n\n  const clientFields = zodShapeToTsFields(z, { ...def.client })\n  const serverFields = zodShapeToTsFields(z, { ...def.server, ...def.client })\n\n  await writeDts(root, clientFields, serverFields)\n}\n\n/**\n * Writes vite-env.d.ts for Standard Schema definitions.\n * All fields are typed as `string` — Standard Schema has no runtime type introspection.\n */\nexport async function generateStandardDts(\n  def: StandardEnvDefinition,\n  root: string,\n): Promise<void> {\n  const clientKeys = Object.keys(def.client ?? {})\n  const serverKeys = [...Object.keys(def.server ?? {}), ...clientKeys]\n\n  const clientFields = keysToTsFields(clientKeys)\n  const serverFields = keysToTsFields(serverKeys)\n\n  await writeDts(root, clientFields, serverFields, '(Standard Schema)')\n}\n\nasync function writeDts(\n  root: string,\n  clientFields: string,\n  serverFields: string,\n  tag = '',\n): Promise<void> {\n  const header = tag\n    ? `// Auto-generated by @vite-env/core ${tag}\\n// Do not edit manually — re-generated on every dev server start and build\\n// Tip: for richer types, use defineEnv() with Zod instead of defineStandardEnv()`\n    : `// Auto-generated by @vite-env/core\\n// Do not edit manually — re-generated on every dev server start and build`\n\n  const dts = `${header}\n\ndeclare module 'virtual:env/client' {\n  const env: {\n${clientFields}\n  }\n  export { env }\n  export default env\n}\n\ndeclare module 'virtual:env/server' {\n  const env: {\n${serverFields}\n  }\n  export { env }\n  export default env\n}\n`\n\n  const filePath = path.join(root, 'vite-env.d.ts')\n  try {\n    await fs.writeFile(filePath, dts, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env.d.ts to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n\nfunction keysToTsFields(keys: string[]): string {\n  return keys\n    .map(key => `    readonly ${key}: string`)\n    .join('\\n')\n}\n\nfunction zodShapeToTsFields(z: any, shape: Record<string, unknown>): string {\n  return Object.entries(shape)\n    .map(([key, schema]) => {\n      const tsType = zodToTs(z, schema)\n      const optional = schema instanceof z.ZodOptional\n      return `    readonly ${key}${optional ? '?' : ''}: ${tsType}`\n    })\n    .join('\\n')\n}\n\nfunction zodToTs(z: any, schema: any): string {\n  if (schema instanceof z.ZodOptional)\n    return zodToTs(z, schema.unwrap())\n  if (schema instanceof z.ZodDefault)\n    return zodToTs(z, schema.def.innerType)\n  if (schema instanceof z.ZodString)\n    return 'string'\n  if (schema instanceof z.ZodNumber)\n    return 'number'\n  if (schema instanceof z.ZodBoolean)\n    return 'boolean'\n  if (schema instanceof z.ZodEnum)\n    return (schema.options as string[]).map(o => `'${o}'`).join(' | ')\n  if (schema instanceof z.ZodPipe)\n    return zodToTs(z, schema.def.out)\n  return 'string'\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,eAAsB,YACpB,KACA,MACe;CACf,MAAM,EAAE,MAAM,MAAM,OAAO;AAK3B,OAAM,SAAS,MAHM,mBAAmB,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,EACxC,mBAAmB,GAAG;EAAE,GAAG,IAAI;EAAQ,GAAG,IAAI;EAAQ,CAAC,CAE5B;;;;;;AAOlD,eAAsB,oBACpB,KACA,MACe;CACf,MAAM,aAAa,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC;CAChD,MAAM,aAAa,CAAC,GAAG,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,EAAE,GAAG,WAAW;AAKpE,OAAM,SAAS,MAHM,eAAe,WAAW,EAC1B,eAAe,WAAW,EAEE,oBAAoB;;AAGvE,eAAe,SACb,MACA,cACA,cACA,MAAM,IACS;CAKf,MAAM,MAAM,GAJG,MACX,uCAAuC,IAAI,mKAC3C,kHAEkB;;;;EAItB,aAAa;;;;;;;;EAQb,aAAa;;;;;;CAOb,MAAM,WAAWA,UAAAA,QAAK,KAAK,MAAM,gBAAgB;AACjD,KAAI;AACF,QAAMC,iBAAAA,QAAG,UAAU,UAAU,KAAK,QAAQ;UAErC,GAAG;AACR,QAAM,IAAI,MACR,+CAA+C,KAAK,4BACpD,EAAE,OAAO,GAAG,CACb;;;AAIL,SAAS,eAAe,MAAwB;AAC9C,QAAO,KACJ,KAAI,QAAO,gBAAgB,IAAI,UAAU,CACzC,KAAK,KAAK;;AAGf,SAAS,mBAAmB,GAAQ,OAAwC;AAC1E,QAAO,OAAO,QAAQ,MAAM,CACzB,KAAK,CAAC,KAAK,YAAY;EACtB,MAAM,SAAS,QAAQ,GAAG,OAAO;AAEjC,SAAO,gBAAgB,MADN,kBAAkB,EAAE,cACG,MAAM,GAAG,IAAI;GACrD,CACD,KAAK,KAAK;;AAGf,SAAS,QAAQ,GAAQ,QAAqB;AAC5C,KAAI,kBAAkB,EAAE,YACtB,QAAO,QAAQ,GAAG,OAAO,QAAQ,CAAC;AACpC,KAAI,kBAAkB,EAAE,WACtB,QAAO,QAAQ,GAAG,OAAO,IAAI,UAAU;AACzC,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,WACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,QACtB,QAAQ,OAAO,QAAqB,KAAI,MAAK,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;AACpE,KAAI,kBAAkB,EAAE,QACtB,QAAO,QAAQ,GAAG,OAAO,IAAI,IAAI;AACnC,QAAO"}
+{"version":3,"file":"dts-BgHTl6hC.cjs","names":["path","fs"],"sources":["../src/dts.ts"],"sourcesContent":["// @env node\nimport type { EnvDefinition, StandardEnvDefinition } from './types'\nimport type { z as ZodNs } from 'zod'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\n\n/**\n * Writes vite-env.d.ts for Zod definitions.\n * Uses instanceof checks to infer TypeScript types from Zod schemas.\n * Zod is loaded dynamically so this module can be imported without zod installed.\n */\nexport async function generateDts(\n  def: EnvDefinition,\n  root: string,\n): Promise<void> {\n  const { z } = await import('zod')\n\n  const clientFields = zodShapeToTsFields(z, { ...def.client })\n  const serverFields = zodShapeToTsFields(z, { ...def.server, ...def.client })\n\n  await writeDts(root, clientFields, serverFields)\n}\n\n/**\n * Writes vite-env.d.ts for Standard Schema definitions.\n * All fields are typed as `string` — Standard Schema has no runtime type introspection.\n */\nexport async function generateStandardDts(\n  def: StandardEnvDefinition,\n  root: string,\n): Promise<void> {\n  const clientKeys = Object.keys(def.client ?? {})\n  const serverKeys = [...Object.keys(def.server ?? {}), ...clientKeys]\n\n  const clientFields = keysToTsFields(clientKeys)\n  const serverFields = keysToTsFields(serverKeys)\n\n  await writeDts(root, clientFields, serverFields, '(Standard Schema)')\n}\n\nasync function writeDts(\n  root: string,\n  clientFields: string,\n  serverFields: string,\n  tag = '',\n): Promise<void> {\n  const header = tag\n    ? `// Auto-generated by @vite-env/core ${tag}\\n// Do not edit manually — re-generated on every dev server start and build\\n// Tip: for richer types, use defineEnv() with Zod instead of defineStandardEnv()`\n    : `// Auto-generated by @vite-env/core\\n// Do not edit manually — re-generated on every dev server start and build`\n\n  const dts = `${header}\n\ndeclare module 'virtual:env/client' {\n  const env: {\n${clientFields}\n  }\n  export { env }\n  export default env\n}\n\ndeclare module 'virtual:env/server' {\n  const env: {\n${serverFields}\n  }\n  export { env }\n  export default env\n}\n`\n\n  const filePath = path.join(root, 'vite-env.d.ts')\n  try {\n    await fs.writeFile(filePath, dts, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env.d.ts to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n\nfunction keysToTsFields(keys: string[]): string {\n  return keys\n    .map(key => `    readonly ${key}: string`)\n    .join('\\n')\n}\n\nfunction zodShapeToTsFields(z: typeof ZodNs, shape: Record<string, unknown>): string {\n  return Object.entries(shape)\n    .map(([key, schema]) => {\n      const tsType = zodToTs(z, schema)\n      const optional = schema instanceof z.ZodOptional\n      return `    readonly ${key}${optional ? '?' : ''}: ${tsType}`\n    })\n    .join('\\n')\n}\n\nfunction zodToTs(z: typeof ZodNs, schema: unknown): string {\n  if (schema instanceof z.ZodOptional)\n    return zodToTs(z, schema.unwrap())\n  if (schema instanceof z.ZodDefault)\n    return zodToTs(z, schema.def.innerType)\n  if (schema instanceof z.ZodString)\n    return 'string'\n  if (schema instanceof z.ZodNumber)\n    return 'number'\n  if (schema instanceof z.ZodBoolean)\n    return 'boolean'\n  if (schema instanceof z.ZodEnum)\n    return (schema.options as string[]).map(o => `'${o}'`).join(' | ')\n  if (schema instanceof z.ZodPipe)\n    return zodToTs(z, schema.def.out)\n  return 'string'\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,eAAsB,YACpB,KACA,MACe;CACf,MAAM,EAAE,MAAM,MAAM,OAAO;AAK3B,OAAM,SAAS,MAHM,mBAAmB,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,EACxC,mBAAmB,GAAG;EAAE,GAAG,IAAI;EAAQ,GAAG,IAAI;EAAQ,CAAC,CAE5B;;;;;;AAOlD,eAAsB,oBACpB,KACA,MACe;CACf,MAAM,aAAa,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC;CAChD,MAAM,aAAa,CAAC,GAAG,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,EAAE,GAAG,WAAW;AAKpE,OAAM,SAAS,MAHM,eAAe,WAAW,EAC1B,eAAe,WAAW,EAEE,oBAAoB;;AAGvE,eAAe,SACb,MACA,cACA,cACA,MAAM,IACS;CAKf,MAAM,MAAM,GAJG,MACX,uCAAuC,IAAI,mKAC3C,kHAEkB;;;;EAItB,aAAa;;;;;;;;EAQb,aAAa;;;;;;CAOb,MAAM,WAAWA,UAAAA,QAAK,KAAK,MAAM,gBAAgB;AACjD,KAAI;AACF,QAAMC,iBAAAA,QAAG,UAAU,UAAU,KAAK,QAAQ;UAErC,GAAG;AACR,QAAM,IAAI,MACR,+CAA+C,KAAK,4BACpD,EAAE,OAAO,GAAG,CACb;;;AAIL,SAAS,eAAe,MAAwB;AAC9C,QAAO,KACJ,KAAI,QAAO,gBAAgB,IAAI,UAAU,CACzC,KAAK,KAAK;;AAGf,SAAS,mBAAmB,GAAiB,OAAwC;AACnF,QAAO,OAAO,QAAQ,MAAM,CACzB,KAAK,CAAC,KAAK,YAAY;EACtB,MAAM,SAAS,QAAQ,GAAG,OAAO;AAEjC,SAAO,gBAAgB,MADN,kBAAkB,EAAE,cACG,MAAM,GAAG,IAAI;GACrD,CACD,KAAK,KAAK;;AAGf,SAAS,QAAQ,GAAiB,QAAyB;AACzD,KAAI,kBAAkB,EAAE,YACtB,QAAO,QAAQ,GAAG,OAAO,QAAQ,CAAC;AACpC,KAAI,kBAAkB,EAAE,WACtB,QAAO,QAAQ,GAAG,OAAO,IAAI,UAAU;AACzC,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,WACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,QACtB,QAAQ,OAAO,QAAqB,KAAI,MAAK,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;AACpE,KAAI,kBAAkB,EAAE,QACtB,QAAO,QAAQ,GAAG,OAAO,IAAI,IAAI;AACnC,QAAO"}

package/dist/dts.d.cts

@@ -1,4 +1,4 @@
-import { n as EnvDefinition, o as StandardEnvDefinition } from "./types-Bl3YdPck.cjs";
+import { n as EnvDefinition, o as StandardEnvDefinition } from "./types-CpYkRwLM.cjs";
 
 //#region src/dts.d.ts
 /**

package/dist/dts.d.mts

@@ -1,4 +1,4 @@
-import { n as EnvDefinition, o as StandardEnvDefinition } from "./types-CUF5RARc.mjs";
+import { n as EnvDefinition, o as StandardEnvDefinition } from "./types--Km3TAdJ.mjs";
 
 //#region src/dts.d.ts
 /**

package/dist/dts.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"dts.mjs","names":[],"sources":["../src/dts.ts"],"sourcesContent":["// @env node\nimport type { EnvDefinition, StandardEnvDefinition } from './types'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\n\n/**\n * Writes vite-env.d.ts for Zod definitions.\n * Uses instanceof checks to infer TypeScript types from Zod schemas.\n * Zod is loaded dynamically so this module can be imported without zod installed.\n */\nexport async function generateDts(\n  def: EnvDefinition,\n  root: string,\n): Promise<void> {\n  const { z } = await import('zod')\n\n  const clientFields = zodShapeToTsFields(z, { ...def.client })\n  const serverFields = zodShapeToTsFields(z, { ...def.server, ...def.client })\n\n  await writeDts(root, clientFields, serverFields)\n}\n\n/**\n * Writes vite-env.d.ts for Standard Schema definitions.\n * All fields are typed as `string` — Standard Schema has no runtime type introspection.\n */\nexport async function generateStandardDts(\n  def: StandardEnvDefinition,\n  root: string,\n): Promise<void> {\n  const clientKeys = Object.keys(def.client ?? {})\n  const serverKeys = [...Object.keys(def.server ?? {}), ...clientKeys]\n\n  const clientFields = keysToTsFields(clientKeys)\n  const serverFields = keysToTsFields(serverKeys)\n\n  await writeDts(root, clientFields, serverFields, '(Standard Schema)')\n}\n\nasync function writeDts(\n  root: string,\n  clientFields: string,\n  serverFields: string,\n  tag = '',\n): Promise<void> {\n  const header = tag\n    ? `// Auto-generated by @vite-env/core ${tag}\\n// Do not edit manually — re-generated on every dev server start and build\\n// Tip: for richer types, use defineEnv() with Zod instead of defineStandardEnv()`\n    : `// Auto-generated by @vite-env/core\\n// Do not edit manually — re-generated on every dev server start and build`\n\n  const dts = `${header}\n\ndeclare module 'virtual:env/client' {\n  const env: {\n${clientFields}\n  }\n  export { env }\n  export default env\n}\n\ndeclare module 'virtual:env/server' {\n  const env: {\n${serverFields}\n  }\n  export { env }\n  export default env\n}\n`\n\n  const filePath = path.join(root, 'vite-env.d.ts')\n  try {\n    await fs.writeFile(filePath, dts, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env.d.ts to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n\nfunction keysToTsFields(keys: string[]): string {\n  return keys\n    .map(key => `    readonly ${key}: string`)\n    .join('\\n')\n}\n\nfunction zodShapeToTsFields(z: any, shape: Record<string, unknown>): string {\n  return Object.entries(shape)\n    .map(([key, schema]) => {\n      const tsType = zodToTs(z, schema)\n      const optional = schema instanceof z.ZodOptional\n      return `    readonly ${key}${optional ? '?' : ''}: ${tsType}`\n    })\n    .join('\\n')\n}\n\nfunction zodToTs(z: any, schema: any): string {\n  if (schema instanceof z.ZodOptional)\n    return zodToTs(z, schema.unwrap())\n  if (schema instanceof z.ZodDefault)\n    return zodToTs(z, schema.def.innerType)\n  if (schema instanceof z.ZodString)\n    return 'string'\n  if (schema instanceof z.ZodNumber)\n    return 'number'\n  if (schema instanceof z.ZodBoolean)\n    return 'boolean'\n  if (schema instanceof z.ZodEnum)\n    return (schema.options as string[]).map(o => `'${o}'`).join(' | ')\n  if (schema instanceof z.ZodPipe)\n    return zodToTs(z, schema.def.out)\n  return 'string'\n}\n"],"mappings":";;;;;;;;AAUA,eAAsB,YACpB,KACA,MACe;CACf,MAAM,EAAE,MAAM,MAAM,OAAO;AAK3B,OAAM,SAAS,MAHM,mBAAmB,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,EACxC,mBAAmB,GAAG;EAAE,GAAG,IAAI;EAAQ,GAAG,IAAI;EAAQ,CAAC,CAE5B;;;;;;AAOlD,eAAsB,oBACpB,KACA,MACe;CACf,MAAM,aAAa,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC;CAChD,MAAM,aAAa,CAAC,GAAG,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,EAAE,GAAG,WAAW;AAKpE,OAAM,SAAS,MAHM,eAAe,WAAW,EAC1B,eAAe,WAAW,EAEE,oBAAoB;;AAGvE,eAAe,SACb,MACA,cACA,cACA,MAAM,IACS;CAKf,MAAM,MAAM,GAJG,MACX,uCAAuC,IAAI,mKAC3C,kHAEkB;;;;EAItB,aAAa;;;;;;;;EAQb,aAAa;;;;;;CAOb,MAAM,WAAW,KAAK,KAAK,MAAM,gBAAgB;AACjD,KAAI;AACF,QAAM,GAAG,UAAU,UAAU,KAAK,QAAQ;UAErC,GAAG;AACR,QAAM,IAAI,MACR,+CAA+C,KAAK,4BACpD,EAAE,OAAO,GAAG,CACb;;;AAIL,SAAS,eAAe,MAAwB;AAC9C,QAAO,KACJ,KAAI,QAAO,gBAAgB,IAAI,UAAU,CACzC,KAAK,KAAK;;AAGf,SAAS,mBAAmB,GAAQ,OAAwC;AAC1E,QAAO,OAAO,QAAQ,MAAM,CACzB,KAAK,CAAC,KAAK,YAAY;EACtB,MAAM,SAAS,QAAQ,GAAG,OAAO;AAEjC,SAAO,gBAAgB,MADN,kBAAkB,EAAE,cACG,MAAM,GAAG,IAAI;GACrD,CACD,KAAK,KAAK;;AAGf,SAAS,QAAQ,GAAQ,QAAqB;AAC5C,KAAI,kBAAkB,EAAE,YACtB,QAAO,QAAQ,GAAG,OAAO,QAAQ,CAAC;AACpC,KAAI,kBAAkB,EAAE,WACtB,QAAO,QAAQ,GAAG,OAAO,IAAI,UAAU;AACzC,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,WACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,QACtB,QAAQ,OAAO,QAAqB,KAAI,MAAK,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;AACpE,KAAI,kBAAkB,EAAE,QACtB,QAAO,QAAQ,GAAG,OAAO,IAAI,IAAI;AACnC,QAAO"}
+{"version":3,"file":"dts.mjs","names":[],"sources":["../src/dts.ts"],"sourcesContent":["// @env node\nimport type { EnvDefinition, StandardEnvDefinition } from './types'\nimport type { z as ZodNs } from 'zod'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\n\n/**\n * Writes vite-env.d.ts for Zod definitions.\n * Uses instanceof checks to infer TypeScript types from Zod schemas.\n * Zod is loaded dynamically so this module can be imported without zod installed.\n */\nexport async function generateDts(\n  def: EnvDefinition,\n  root: string,\n): Promise<void> {\n  const { z } = await import('zod')\n\n  const clientFields = zodShapeToTsFields(z, { ...def.client })\n  const serverFields = zodShapeToTsFields(z, { ...def.server, ...def.client })\n\n  await writeDts(root, clientFields, serverFields)\n}\n\n/**\n * Writes vite-env.d.ts for Standard Schema definitions.\n * All fields are typed as `string` — Standard Schema has no runtime type introspection.\n */\nexport async function generateStandardDts(\n  def: StandardEnvDefinition,\n  root: string,\n): Promise<void> {\n  const clientKeys = Object.keys(def.client ?? {})\n  const serverKeys = [...Object.keys(def.server ?? {}), ...clientKeys]\n\n  const clientFields = keysToTsFields(clientKeys)\n  const serverFields = keysToTsFields(serverKeys)\n\n  await writeDts(root, clientFields, serverFields, '(Standard Schema)')\n}\n\nasync function writeDts(\n  root: string,\n  clientFields: string,\n  serverFields: string,\n  tag = '',\n): Promise<void> {\n  const header = tag\n    ? `// Auto-generated by @vite-env/core ${tag}\\n// Do not edit manually — re-generated on every dev server start and build\\n// Tip: for richer types, use defineEnv() with Zod instead of defineStandardEnv()`\n    : `// Auto-generated by @vite-env/core\\n// Do not edit manually — re-generated on every dev server start and build`\n\n  const dts = `${header}\n\ndeclare module 'virtual:env/client' {\n  const env: {\n${clientFields}\n  }\n  export { env }\n  export default env\n}\n\ndeclare module 'virtual:env/server' {\n  const env: {\n${serverFields}\n  }\n  export { env }\n  export default env\n}\n`\n\n  const filePath = path.join(root, 'vite-env.d.ts')\n  try {\n    await fs.writeFile(filePath, dts, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env.d.ts to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n\nfunction keysToTsFields(keys: string[]): string {\n  return keys\n    .map(key => `    readonly ${key}: string`)\n    .join('\\n')\n}\n\nfunction zodShapeToTsFields(z: typeof ZodNs, shape: Record<string, unknown>): string {\n  return Object.entries(shape)\n    .map(([key, schema]) => {\n      const tsType = zodToTs(z, schema)\n      const optional = schema instanceof z.ZodOptional\n      return `    readonly ${key}${optional ? '?' : ''}: ${tsType}`\n    })\n    .join('\\n')\n}\n\nfunction zodToTs(z: typeof ZodNs, schema: unknown): string {\n  if (schema instanceof z.ZodOptional)\n    return zodToTs(z, schema.unwrap())\n  if (schema instanceof z.ZodDefault)\n    return zodToTs(z, schema.def.innerType)\n  if (schema instanceof z.ZodString)\n    return 'string'\n  if (schema instanceof z.ZodNumber)\n    return 'number'\n  if (schema instanceof z.ZodBoolean)\n    return 'boolean'\n  if (schema instanceof z.ZodEnum)\n    return (schema.options as string[]).map(o => `'${o}'`).join(' | ')\n  if (schema instanceof z.ZodPipe)\n    return zodToTs(z, schema.def.out)\n  return 'string'\n}\n"],"mappings":";;;;;;;;AAWA,eAAsB,YACpB,KACA,MACe;CACf,MAAM,EAAE,MAAM,MAAM,OAAO;AAK3B,OAAM,SAAS,MAHM,mBAAmB,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,EACxC,mBAAmB,GAAG;EAAE,GAAG,IAAI;EAAQ,GAAG,IAAI;EAAQ,CAAC,CAE5B;;;;;;AAOlD,eAAsB,oBACpB,KACA,MACe;CACf,MAAM,aAAa,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC;CAChD,MAAM,aAAa,CAAC,GAAG,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,EAAE,GAAG,WAAW;AAKpE,OAAM,SAAS,MAHM,eAAe,WAAW,EAC1B,eAAe,WAAW,EAEE,oBAAoB;;AAGvE,eAAe,SACb,MACA,cACA,cACA,MAAM,IACS;CAKf,MAAM,MAAM,GAJG,MACX,uCAAuC,IAAI,mKAC3C,kHAEkB;;;;EAItB,aAAa;;;;;;;;EAQb,aAAa;;;;;;CAOb,MAAM,WAAW,KAAK,KAAK,MAAM,gBAAgB;AACjD,KAAI;AACF,QAAM,GAAG,UAAU,UAAU,KAAK,QAAQ;UAErC,GAAG;AACR,QAAM,IAAI,MACR,+CAA+C,KAAK,4BACpD,EAAE,OAAO,GAAG,CACb;;;AAIL,SAAS,eAAe,MAAwB;AAC9C,QAAO,KACJ,KAAI,QAAO,gBAAgB,IAAI,UAAU,CACzC,KAAK,KAAK;;AAGf,SAAS,mBAAmB,GAAiB,OAAwC;AACnF,QAAO,OAAO,QAAQ,MAAM,CACzB,KAAK,CAAC,KAAK,YAAY;EACtB,MAAM,SAAS,QAAQ,GAAG,OAAO;AAEjC,SAAO,gBAAgB,MADN,kBAAkB,EAAE,cACG,MAAM,GAAG,IAAI;GACrD,CACD,KAAK,KAAK;;AAGf,SAAS,QAAQ,GAAiB,QAAyB;AACzD,KAAI,kBAAkB,EAAE,YACtB,QAAO,QAAQ,GAAG,OAAO,QAAQ,CAAC;AACpC,KAAI,kBAAkB,EAAE,WACtB,QAAO,QAAQ,GAAG,OAAO,IAAI,UAAU;AACzC,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,UACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,WACtB,QAAO;AACT,KAAI,kBAAkB,EAAE,QACtB,QAAQ,OAAO,QAAqB,KAAI,MAAK,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;AACpE,KAAI,kBAAkB,EAAE,QACtB,QAAO,QAAQ,GAAG,OAAO,IAAI,IAAI;AACnC,QAAO"}

package/dist/format.d.cts

@@ -1,4 +1,4 @@
-import { s as StandardValidationIssue } from "./types-Bl3YdPck.cjs";
+import { s as StandardValidationIssue } from "./types-CpYkRwLM.cjs";
 import { core } from "zod";
 
 //#region src/guard.d.ts

package/dist/format.d.mts

@@ -1,4 +1,4 @@
-import { s as StandardValidationIssue } from "./types-CUF5RARc.mjs";
+import { s as StandardValidationIssue } from "./types--Km3TAdJ.mjs";
 import { core } from "zod";
 
 //#region src/guard.d.ts

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { a as InferServerEnv, i as InferClientEnv, n as EnvDefinition, o as StandardEnvDefinition, r as EnvPreset, t as AnyEnvDefinition } from "./types-Bl3YdPck.cjs";
+import { a as InferServerEnv, i as InferClientEnv, n as EnvDefinition, o as StandardEnvDefinition, r as EnvPreset, t as AnyEnvDefinition } from "./types-CpYkRwLM.cjs";
 import { defineEnv } from "./schema.cjs";
 import { defineStandardEnv } from "./standard.cjs";
 export { type AnyEnvDefinition, type EnvDefinition, type EnvPreset, type InferClientEnv, type InferServerEnv, type StandardEnvDefinition, defineEnv, defineStandardEnv };

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { a as InferServerEnv, i as InferClientEnv, n as EnvDefinition, o as StandardEnvDefinition, r as EnvPreset, t as AnyEnvDefinition } from "./types-CUF5RARc.mjs";
+import { a as InferServerEnv, i as InferClientEnv, n as EnvDefinition, o as StandardEnvDefinition, r as EnvPreset, t as AnyEnvDefinition } from "./types--Km3TAdJ.mjs";
 import { defineEnv } from "./schema.mjs";
 import { defineStandardEnv } from "./standard.mjs";
 export { type AnyEnvDefinition, type EnvDefinition, type EnvPreset, type InferClientEnv, type InferServerEnv, type StandardEnvDefinition, defineEnv, defineStandardEnv };

package/dist/leak.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"leak.cjs","names":[],"sources":["../src/leak.ts"],"sourcesContent":["import type { AnyEnvDefinition } from './types'\n\ninterface LeakReport {\n  key: string\n  chunk: string\n}\n\n/**\n * Scans all client-destined chunks for literal values of server-only vars.\n * Fires in generateBundle() — Rolldown sequential hook, safe.\n *\n * Strategy: for each server-only key, check if its actual runtime value\n * appears as a literal string in any output chunk's source code.\n * Short/common values (< 8 chars) are skipped to avoid false positives.\n */\nexport function detectServerLeak(\n  def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n  bundle: Record<string, { type: string, code?: string }>,\n  onSkipped?: (keys: string[]) => void,\n): LeakReport[] {\n  const serverKeys = new Set(Object.keys(def.server ?? {}))\n\n  const shortSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length < 8,\n  )\n\n  if (shortSecrets.length > 0 && onSkipped) {\n    onSkipped(shortSecrets.map(([k]) => k))\n  }\n\n  const serverSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length >= 8,\n  )\n\n  const chunks = Object.entries(bundle).filter(\n    ([, chunk]) => chunk.type === 'chunk' && !!chunk.code,\n  )\n\n  const leaks: LeakReport[] = []\n  for (const [key, value] of serverSecrets) {\n    for (const [chunkName, chunk] of chunks) {\n      if (chunk.code!.includes(value)) {\n        leaks.push({ key, chunk: chunkName })\n      }\n    }\n  }\n\n  return leaks\n}\n"],"mappings":";;;;;;;;;;AAeA,SAAgB,iBACd,KACA,MACA,QACA,WACc;CACd,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,eAAe,OAAO,QAAQ,KAAK,CAAC,QACvC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,SAAS,EACxB;AAED,KAAI,aAAa,SAAS,KAAK,UAC7B,WAAU,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC;CAGzC,MAAM,gBAAgB,OAAO,QAAQ,KAAK,CAAC,QACxC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,UAAU,EACzB;CAED,MAAM,SAAS,OAAO,QAAQ,OAAO,CAAC,QACnC,GAAG,WAAW,MAAM,SAAS,WAAW,CAAC,CAAC,MAAM,KAClD;CAED,MAAM,QAAsB,EAAE;AAC9B,MAAK,MAAM,CAAC,KAAK,UAAU,cACzB,MAAK,MAAM,CAAC,WAAW,UAAU,OAC/B,KAAI,MAAM,KAAM,SAAS,MAAM,CAC7B,OAAM,KAAK;EAAE;EAAK,OAAO;EAAW,CAAC;AAK3C,QAAO"}
+{"version":3,"file":"leak.cjs","names":[],"sources":["../src/leak.ts"],"sourcesContent":["import type { AnyEnvDefinition } from './types'\n\ntype LeakReport = {\n  key: string\n  chunk: string\n}\n\n/**\n * Scans all client-destined chunks for literal values of server-only vars.\n * Fires in generateBundle() — Rolldown sequential hook, safe.\n *\n * Strategy: for each server-only key, check if its actual runtime value\n * appears as a literal string in any output chunk's source code.\n * Short/common values (< 8 chars) are skipped to avoid false positives.\n */\nexport function detectServerLeak(\n  def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n  bundle: Record<string, { type: string, code?: string }>,\n  onSkipped?: (keys: string[]) => void,\n): LeakReport[] {\n  const serverKeys = new Set(Object.keys(def.server ?? {}))\n\n  const shortSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length < 8,\n  )\n\n  if (shortSecrets.length > 0 && onSkipped) {\n    onSkipped(shortSecrets.map(([k]) => k))\n  }\n\n  const serverSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length >= 8,\n  )\n\n  const chunks = Object.entries(bundle).filter(\n    ([, chunk]) => chunk.type === 'chunk' && !!chunk.code,\n  )\n\n  const leaks: LeakReport[] = []\n  for (const [key, value] of serverSecrets) {\n    for (const [chunkName, chunk] of chunks) {\n      if (chunk.code!.includes(value)) {\n        leaks.push({ key, chunk: chunkName })\n      }\n    }\n  }\n\n  return leaks\n}\n"],"mappings":";;;;;;;;;;AAeA,SAAgB,iBACd,KACA,MACA,QACA,WACc;CACd,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,eAAe,OAAO,QAAQ,KAAK,CAAC,QACvC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,SAAS,EACxB;AAED,KAAI,aAAa,SAAS,KAAK,UAC7B,WAAU,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC;CAGzC,MAAM,gBAAgB,OAAO,QAAQ,KAAK,CAAC,QACxC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,UAAU,EACzB;CAED,MAAM,SAAS,OAAO,QAAQ,OAAO,CAAC,QACnC,GAAG,WAAW,MAAM,SAAS,WAAW,CAAC,CAAC,MAAM,KAClD;CAED,MAAM,QAAsB,EAAE;AAC9B,MAAK,MAAM,CAAC,KAAK,UAAU,cACzB,MAAK,MAAM,CAAC,WAAW,UAAU,OAC/B,KAAI,MAAM,KAAM,SAAS,MAAM,CAC7B,OAAM,KAAK;EAAE;EAAK,OAAO;EAAW,CAAC;AAK3C,QAAO"}

package/dist/leak.d.cts

@@ -1,10 +1,10 @@
-import { t as AnyEnvDefinition } from "./types-Bl3YdPck.cjs";
+import { t as AnyEnvDefinition } from "./types-CpYkRwLM.cjs";
 
 //#region src/leak.d.ts
-interface LeakReport {
+type LeakReport = {
   key: string;
   chunk: string;
-}
+};
 /**
  * Scans all client-destined chunks for literal values of server-only vars.
  * Fires in generateBundle() — Rolldown sequential hook, safe.

package/dist/leak.d.mts

@@ -1,10 +1,10 @@
-import { t as AnyEnvDefinition } from "./types-CUF5RARc.mjs";
+import { t as AnyEnvDefinition } from "./types--Km3TAdJ.mjs";
 
 //#region src/leak.d.ts
-interface LeakReport {
+type LeakReport = {
   key: string;
   chunk: string;
-}
+};
 /**
  * Scans all client-destined chunks for literal values of server-only vars.
  * Fires in generateBundle() — Rolldown sequential hook, safe.

package/dist/leak.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"leak.mjs","names":[],"sources":["../src/leak.ts"],"sourcesContent":["import type { AnyEnvDefinition } from './types'\n\ninterface LeakReport {\n  key: string\n  chunk: string\n}\n\n/**\n * Scans all client-destined chunks for literal values of server-only vars.\n * Fires in generateBundle() — Rolldown sequential hook, safe.\n *\n * Strategy: for each server-only key, check if its actual runtime value\n * appears as a literal string in any output chunk's source code.\n * Short/common values (< 8 chars) are skipped to avoid false positives.\n */\nexport function detectServerLeak(\n  def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n  bundle: Record<string, { type: string, code?: string }>,\n  onSkipped?: (keys: string[]) => void,\n): LeakReport[] {\n  const serverKeys = new Set(Object.keys(def.server ?? {}))\n\n  const shortSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length < 8,\n  )\n\n  if (shortSecrets.length > 0 && onSkipped) {\n    onSkipped(shortSecrets.map(([k]) => k))\n  }\n\n  const serverSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length >= 8,\n  )\n\n  const chunks = Object.entries(bundle).filter(\n    ([, chunk]) => chunk.type === 'chunk' && !!chunk.code,\n  )\n\n  const leaks: LeakReport[] = []\n  for (const [key, value] of serverSecrets) {\n    for (const [chunkName, chunk] of chunks) {\n      if (chunk.code!.includes(value)) {\n        leaks.push({ key, chunk: chunkName })\n      }\n    }\n  }\n\n  return leaks\n}\n"],"mappings":";;;;;;;;;AAeA,SAAgB,iBACd,KACA,MACA,QACA,WACc;CACd,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,eAAe,OAAO,QAAQ,KAAK,CAAC,QACvC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,SAAS,EACxB;AAED,KAAI,aAAa,SAAS,KAAK,UAC7B,WAAU,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC;CAGzC,MAAM,gBAAgB,OAAO,QAAQ,KAAK,CAAC,QACxC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,UAAU,EACzB;CAED,MAAM,SAAS,OAAO,QAAQ,OAAO,CAAC,QACnC,GAAG,WAAW,MAAM,SAAS,WAAW,CAAC,CAAC,MAAM,KAClD;CAED,MAAM,QAAsB,EAAE;AAC9B,MAAK,MAAM,CAAC,KAAK,UAAU,cACzB,MAAK,MAAM,CAAC,WAAW,UAAU,OAC/B,KAAI,MAAM,KAAM,SAAS,MAAM,CAC7B,OAAM,KAAK;EAAE;EAAK,OAAO;EAAW,CAAC;AAK3C,QAAO"}
+{"version":3,"file":"leak.mjs","names":[],"sources":["../src/leak.ts"],"sourcesContent":["import type { AnyEnvDefinition } from './types'\n\ntype LeakReport = {\n  key: string\n  chunk: string\n}\n\n/**\n * Scans all client-destined chunks for literal values of server-only vars.\n * Fires in generateBundle() — Rolldown sequential hook, safe.\n *\n * Strategy: for each server-only key, check if its actual runtime value\n * appears as a literal string in any output chunk's source code.\n * Short/common values (< 8 chars) are skipped to avoid false positives.\n */\nexport function detectServerLeak(\n  def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n  bundle: Record<string, { type: string, code?: string }>,\n  onSkipped?: (keys: string[]) => void,\n): LeakReport[] {\n  const serverKeys = new Set(Object.keys(def.server ?? {}))\n\n  const shortSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length < 8,\n  )\n\n  if (shortSecrets.length > 0 && onSkipped) {\n    onSkipped(shortSecrets.map(([k]) => k))\n  }\n\n  const serverSecrets = Object.entries(data).filter(\n    (entry): entry is [string, string] =>\n      serverKeys.has(entry[0])\n      && typeof entry[1] === 'string'\n      && entry[1].length >= 8,\n  )\n\n  const chunks = Object.entries(bundle).filter(\n    ([, chunk]) => chunk.type === 'chunk' && !!chunk.code,\n  )\n\n  const leaks: LeakReport[] = []\n  for (const [key, value] of serverSecrets) {\n    for (const [chunkName, chunk] of chunks) {\n      if (chunk.code!.includes(value)) {\n        leaks.push({ key, chunk: chunkName })\n      }\n    }\n  }\n\n  return leaks\n}\n"],"mappings":";;;;;;;;;AAeA,SAAgB,iBACd,KACA,MACA,QACA,WACc;CACd,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,eAAe,OAAO,QAAQ,KAAK,CAAC,QACvC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,SAAS,EACxB;AAED,KAAI,aAAa,SAAS,KAAK,UAC7B,WAAU,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC;CAGzC,MAAM,gBAAgB,OAAO,QAAQ,KAAK,CAAC,QACxC,UACC,WAAW,IAAI,MAAM,GAAG,IACrB,OAAO,MAAM,OAAO,YACpB,MAAM,GAAG,UAAU,EACzB;CAED,MAAM,SAAS,OAAO,QAAQ,OAAO,CAAC,QACnC,GAAG,WAAW,MAAM,SAAS,WAAW,CAAC,CAAC,MAAM,KAClD;CAED,MAAM,QAAsB,EAAE;AAC9B,MAAK,MAAM,CAAC,KAAK,UAAU,cACzB,MAAK,MAAM,CAAC,WAAW,UAAU,OAC/B,KAAI,MAAM,KAAM,SAAS,MAAM,CAC7B,OAAM,KAAK;EAAE;EAAK,OAAO;EAAW,CAAC;AAK3C,QAAO"}

package/dist/plugin.cjs

@@ -202,6 +202,8 @@ function ViteEnv(options = {}) {
 		},
 		generateBundle(_options, bundle) {
 			if (resolvedConfig.build.ssr) return;
+			const envName = this.environment?.name ?? "client";
+			if (serverEnvs.includes(envName)) return;
 			const leaks = require_leak.detectServerLeak(envDefinition, lastValidated, bundle, (keys) => {
 				resolvedConfig.logger.warn(`  \x1B[33m⚠\x1B[0m \x1B[36m[vite-env]\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(", ")}`);
 			});

package/dist/plugin.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs","names":["formatGuardLogEntry","path","fs","process","isStandardEnvDefinition","validateStandardEnv","formatStandardSchemaError","path","loadEnvConfig","generateStandardDts","formatHardError","formatGuardWarning","detectServerLeak"],"sources":["../src/guard.ts","../src/log.ts","../src/sources.ts","../src/virtual.ts","../src/plugin.ts"],"sourcesContent":["export type GuardMode = 'error' | 'stub' | 'warn'\n\nexport type GuardResult\n  = | { allowed: true }\n    | { allowed: false, mode: GuardMode, envName: string, importer: string | undefined }\n\nexport type GuardFail = Extract<GuardResult, { allowed: false }>\n\n/**\n * Determines whether the given Vite environment is allowed to import virtual:env/server.\n * Returns a GuardResult discriminated union — allowed or fail with context.\n * When this.environment is undefined (should not occur with Vite ≥ 8), callers default\n * envName to 'client' — failing closed (restrictive) is safer than failing open.\n */\nexport function checkServerModuleAccess(\n  envName: string,\n  serverEnvironments: string[],\n  mode: GuardMode,\n  importer: string | undefined,\n): GuardResult {\n  if (serverEnvironments.includes(envName))\n    return { allowed: true }\n  return { allowed: false, mode, envName, importer }\n}\n\n/**\n * Generates the stub virtual module returned when onClientAccessOfServerModule is 'stub'.\n * The stub throws at runtime if executed — its message reflects that this import was\n * expected to be unreachable and the assumption was wrong.\n */\nexport function buildServerStubModule(envName: string): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — server-only module stub\nthrow new Error(\n  '[vite-env] virtual:env/server was imported in the \"${envName}\" environment. ' +\n  'This module is server-only and was replaced with a stub. ' +\n  'To allow this environment: add it to serverEnvironments. ' +\n  'To suppress this stub: ensure this import never executes in the \"${envName}\" environment.'\n);`,\n  }\n}\n","// @env node\nimport type { GuardFail } from './guard'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { formatGuardLogEntry } from './format'\n\nconst LOG_HEADER = `# vite-env warnings — generated by @vite-env/core\n# These warnings will become hard errors in 1.0.0.\n# To enforce immediately: ViteEnv({ onClientAccessOfServerModule: 'error' })\n# To acknowledge and suppress: ViteEnv({ onClientAccessOfServerModule: 'stub' })\n# To allow specific environments: ViteEnv({ serverEnvironments: ['ssr', 'workerd'] })`\n\n/**\n * Writes accumulated GuardFail entries to vite-env-warnings.log in the project root.\n * Overwrites on each build — stale entries from previous builds must not persist.\n * Called only in 'warn' mode from buildEnd, after verifying the build succeeded.\n */\nexport async function writeWarningsLog(fails: GuardFail[], root: string): Promise<void> {\n  const seen = new Set<string>()\n  const unique = fails.filter((fail) => {\n    const key = `${fail.envName}::${fail.importer ?? ''}`\n    if (seen.has(key))\n      return false\n    seen.add(key)\n    return true\n  })\n  const timestamp = new Date().toISOString()\n  const entries = unique.map(fail => formatGuardLogEntry(fail, timestamp)).join('\\n\\n')\n  const content = `${LOG_HEADER}\\n\\n${entries}\\n`\n  const filePath = path.join(root, 'vite-env-warnings.log')\n  try {\n    await fs.writeFile(filePath, content, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env-warnings.log to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n","// @env node\nimport type { ResolvedConfig } from 'vite'\nimport process from 'node:process'\nimport { loadEnv } from 'vite'\n\n/**\n * Merge priority (highest → lowest):\n *   1. process.env        (CI pipeline secrets win)\n *   2. .env.[mode].local\n *   3. .env.[mode]\n *   4. .env.local\n *   5. .env\n *\n * Prefix '' = load everything, schema decides what's valid.\n */\nexport async function loadEnvSources(\n  config: ResolvedConfig,\n): Promise<Record<string, string>> {\n  const fileEnv = loadEnv(\n    config.mode,\n    config.envDir || config.root,\n    '', // no prefix filter — schema is the filter\n  )\n\n  return {\n    ...fileEnv,\n    ...filterStrings(process.env),\n  }\n}\n\nfunction filterStrings(env: NodeJS.ProcessEnv): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(env).filter(\n      (entry): entry is [string, string] => typeof entry[1] === 'string',\n    ),\n  )\n}\n","import type { AnyEnvDefinition } from './types'\n\nexport function buildClientModule(\n  def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  const clientKeys = new Set(Object.keys(def.client ?? {}))\n\n  const clientData = Object.fromEntries(\n    Object.entries(data).filter(([k]) => clientKeys.has(k)),\n  )\n\n  return {\n    moduleType: 'js', // Required: Vite 8 / Rolldown explicit moduleType\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(clientData, null, 2)});\nexport default env;`,\n  }\n}\n\nexport function buildServerModule(\n  _def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(data, null, 2)});\nexport default env;`,\n  }\n}\n","// @env node\nimport type { Plugin, ResolvedConfig, Rollup } from 'vite'\nimport type { GuardFail } from './guard'\nimport type { AnyEnvDefinition } from './types'\nimport path from 'node:path'\nimport process from 'node:process'\nimport { loadEnvConfig } from './config'\nimport { generateStandardDts } from './dts'\nimport { formatGuardWarning, formatHardError, formatStandardSchemaError } from './format'\nimport { buildServerStubModule, checkServerModuleAccess } from './guard'\nimport { detectServerLeak } from './leak'\nimport { writeWarningsLog } from './log'\nimport { loadEnvSources } from './sources'\nimport { isStandardEnvDefinition, validateStandardEnv } from './standard'\nimport { buildClientModule, buildServerModule } from './virtual'\n\nexport interface ViteEnvOptions {\n  /**\n   * Path to env definition file.\n   * @default './env.ts' (resolved from project root)\n   */\n  configFile?: string\n\n  /**\n   * Vite 8 environment names that are allowed to import virtual:env/server.\n   * Use this to allow edge runtimes (Cloudflare Workers → 'workerd', Deno Deploy → 'ssr').\n   * @default ['ssr']\n   */\n  serverEnvironments?: string[]\n\n  /**\n   * Behavior when virtual:env/server is imported from a disallowed environment.\n   *\n   * - 'warn'  — Deprecation warning printed to terminal + vite-env-warnings.log written.\n   *             Build succeeds but exits with code 1. Default in 0.x releases.\n   *             The default will change to 'error' in 1.0.0.\n   *\n   * - 'error' — Hard build error. No artifacts emitted.\n   *\n   * - 'stub'  — Returns a module that throws at runtime if the import executes.\n   *             Use for testing environments (Vitest jsdom) or framework isomorphic files\n   *             where the import exists but the code path is never reached in a server context.\n   *\n   * @default 'warn'\n   */\n  onClientAccessOfServerModule?: 'error' | 'stub' | 'warn'\n}\n\n/**\n * Validates environment variables against the definition.\n * Routes to Zod or Standard Schema path based on definition type.\n * Zod modules are loaded dynamically to avoid requiring zod for Standard Schema users.\n */\nasync function validateAndFormat(\n  def: AnyEnvDefinition,\n  rawEnv: Record<string, string>,\n): Promise<{ data: Record<string, unknown> } | { error: string }> {\n  if (isStandardEnvDefinition(def)) {\n    const result = await validateStandardEnv(def, rawEnv)\n    if (!result.success) {\n      return { error: formatStandardSchemaError(result.errors) }\n    }\n    return { data: result.data }\n  }\n\n  const { validateEnv } = await import('./schema')\n  const { formatZodError } = await import('./format')\n  const result = validateEnv(def, rawEnv)\n  if (!result.success) {\n    return { error: formatZodError(result.errors) }\n  }\n  return { data: result.data }\n}\n\nexport default function ViteEnv(options: ViteEnvOptions = {}): Plugin {\n  let resolvedConfig: ResolvedConfig\n  let envDefinition: AnyEnvDefinition\n  let lastValidated: Record<string, unknown> = {}\n  let serverModuleGuardFails: GuardFail[] = []\n  let didSetExitCode = false\n\n  const serverEnvs = options.serverEnvironments ?? ['ssr']\n  const guardMode = options.onClientAccessOfServerModule ?? 'warn'\n\n  return {\n    name: 'vite-env',\n    enforce: 'pre',\n\n    async configResolved(config) {\n      resolvedConfig = config\n\n      const configPath = path.resolve(\n        config.root,\n        options.configFile ?? 'env.ts',\n      )\n\n      try {\n        envDefinition = await loadEnvConfig(configPath)\n      }\n      catch (e) {\n        throw new Error(\n          `[vite-env] Could not load env definition file at: ${configPath}\\n`\n          + `  Create an env.ts file and export default defineEnv({ ... })`,\n          { cause: e },\n        )\n      }\n    },\n\n    async buildStart() {\n      serverModuleGuardFails = []\n      if (didSetExitCode) {\n        process.exitCode = 0\n        didSetExitCode = false\n      }\n\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = await validateAndFormat(envDefinition, rawEnv)\n\n      if ('error' in result) {\n        throw new Error(\n          `[vite-env] Environment validation failed:\\n\\n${result.error}`,\n        )\n      }\n\n      lastValidated = result.data\n\n      if (isStandardEnvDefinition(envDefinition)) {\n        await generateStandardDts(envDefinition, resolvedConfig.root)\n      }\n      else {\n        const { generateDts } = await import('./dts')\n        await generateDts(envDefinition, resolvedConfig.root)\n      }\n\n      const count = Object.keys(lastValidated).length\n      resolvedConfig.logger.info(\n        `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m ${count} variables validated`,\n      )\n    },\n\n    resolveId(this: Rollup.PluginContext, source, importer) {\n      if (source === 'virtual:env/client')\n        return '\\0virtual:env/client'\n      if (source === 'virtual:env/server') {\n        const envName = this.environment?.name ?? 'client'\n        const result = checkServerModuleAccess(envName, serverEnvs, guardMode, importer)\n        if (!result.allowed)\n          serverModuleGuardFails.push(result)\n        return '\\0virtual:env/server'\n      }\n    },\n\n    load(this: Rollup.PluginContext, id) {\n      if (id === '\\0virtual:env/client')\n        return buildClientModule(envDefinition, lastValidated)\n      if (id === '\\0virtual:env/server') {\n        const envName = this.environment?.name ?? 'client'\n        // Filter to fails from this environment only — other envs may have recorded fails for their own loads\n        const envFails = serverModuleGuardFails.filter(f => f.envName === envName)\n        if (envFails.length > 0) {\n          // warn once per load cycle using the last recorded fail; unique importers are written to the log file\n          const latest = envFails.at(-1)!\n          if (latest.mode === 'error')\n            throw new Error(formatHardError(latest))\n          if (latest.mode === 'stub')\n            return buildServerStubModule(envName)\n          resolvedConfig.logger.warn(`\\n${formatGuardWarning(latest)}`)\n        }\n        return buildServerModule(envDefinition, lastValidated)\n      }\n    },\n\n    async buildEnd(error) {\n      if (error)\n        return\n      if (serverModuleGuardFails.length === 0)\n        return\n      if (guardMode !== 'warn')\n        return\n      await writeWarningsLog(serverModuleGuardFails, resolvedConfig.root)\n      process.exitCode = 1\n      didSetExitCode = true\n    },\n\n    generateBundle(_options, bundle) {\n      if (resolvedConfig.build.ssr)\n        return\n\n      const leaks = detectServerLeak(\n        envDefinition,\n        lastValidated,\n        bundle as Record<string, { type: string, code?: string }>,\n        (keys) => {\n          resolvedConfig.logger.warn(\n            `  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(', ')}`,\n          )\n        },\n      )\n\n      if (leaks.length > 0) {\n        const details = leaks.map(l => `  ✗ ${l.key} found in ${l.chunk}`).join('\\n')\n        throw new Error(\n          `[vite-env] Server environment variables detected in client bundle!\\n\\n${details}\\n\\n  These variables are marked as server-only and must never reach the browser.`,\n        )\n      }\n    },\n\n    configureServer(server) {\n      const envDir = resolvedConfig.envDir || resolvedConfig.root\n      server.watcher.add(path.join(envDir, '.env*'))\n\n      let debounceTimer: ReturnType<typeof setTimeout>\n\n      server.watcher.on('change', async (file) => {\n        if (!path.basename(file).startsWith('.env'))\n          return\n\n        clearTimeout(debounceTimer)\n        debounceTimer = setTimeout(async () => {\n          try {\n            const rawEnv = await loadEnvSources(resolvedConfig)\n            const result = await validateAndFormat(envDefinition, rawEnv)\n\n            if ('error' in result) {\n              resolvedConfig.logger.warn(\n                `\\n  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidation failed:\\n${result.error}`,\n              )\n              return\n            }\n\n            lastValidated = result.data\n\n            const clientMod = server.moduleGraph.getModuleById('\\0virtual:env/client')\n            const serverMod = server.moduleGraph.getModuleById('\\0virtual:env/server')\n            if (clientMod)\n              server.moduleGraph.invalidateModule(clientMod)\n            if (serverMod)\n              server.moduleGraph.invalidateModule(serverMod)\n            if (clientMod || serverMod) {\n              serverModuleGuardFails = []\n              server.hot.send({ type: 'full-reload' })\n              resolvedConfig.logger.info(\n                `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidated`,\n              )\n            }\n          }\n          catch (e) {\n            resolvedConfig.logger.error(\n              `\\n  \\x1B[31m✗\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Failed to reload env files: ${e instanceof Error ? e.message : String(e)}`,\n            )\n          }\n        }, 150)\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAcA,SAAgB,wBACd,SACA,oBACA,MACA,UACa;AACb,KAAI,mBAAmB,SAAS,QAAQ,CACtC,QAAO,EAAE,SAAS,MAAM;AAC1B,QAAO;EAAE,SAAS;EAAO;EAAM;EAAS;EAAU;;;;;;;AAQpD,SAAgB,sBAAsB,SAAqD;AACzF,QAAO;EACL,YAAY;EACZ,MAAM;;wDAE8C,QAAQ;;;sEAGM,QAAQ;;EAE3E;;;;AClCH,MAAM,aAAa;;;;;;;;;;AAWnB,eAAsB,iBAAiB,OAAoB,MAA6B;CACtF,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS;EACpC,MAAM,MAAM,GAAG,KAAK,QAAQ,IAAI,KAAK,YAAY;AACjD,MAAI,KAAK,IAAI,IAAI,CACf,QAAO;AACT,OAAK,IAAI,IAAI;AACb,SAAO;GACP;CACF,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;CAE1C,MAAM,UAAU,GAAG,WAAW,MADd,OAAO,KAAI,SAAQA,eAAAA,oBAAoB,MAAM,UAAU,CAAC,CAAC,KAAK,OAAO,CACzC;CAC5C,MAAM,WAAWC,UAAAA,QAAK,KAAK,MAAM,wBAAwB;AACzD,KAAI;AACF,QAAMC,iBAAAA,QAAG,UAAU,UAAU,SAAS,QAAQ;UAEzC,GAAG;AACR,QAAM,IAAI,MACR,uDAAuD,KAAK,4BAC5D,EAAE,OAAO,GAAG,CACb;;;;;;;;;;;;;;;ACtBL,eAAsB,eACpB,QACiC;AAOjC,QAAO;EACL,IAAA,GAAA,KAAA,SANA,OAAO,MACP,OAAO,UAAU,OAAO,MACxB,GACD;EAIC,GAAG,cAAcC,aAAAA,QAAQ,IAAI;EAC9B;;AAGH,SAAS,cAAc,KAAgD;AACrE,QAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,QACjB,UAAqC,OAAO,MAAM,OAAO,SAC3D,CACF;;;;ACjCH,SAAgB,kBACd,KACA,MACoC;CACpC,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC,CACxD;AAED,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;;EAEpE;;AAGH,SAAgB,kBACd,MACA,MACoC;AACpC,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAE9D;;;;;;;;;ACwBH,eAAe,kBACb,KACA,QACgE;AAChE,KAAIC,iBAAAA,wBAAwB,IAAI,EAAE;EAChC,MAAM,SAAS,MAAMC,iBAAAA,oBAAoB,KAAK,OAAO;AACrD,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAOC,eAAAA,0BAA0B,OAAO,OAAO,EAAE;AAE5D,SAAO,EAAE,MAAM,OAAO,MAAM;;CAG9B,MAAM,EAAE,gBAAgB,MAAA,QAAA,SAAA,CAAA,WAAA,QAAM,eAAA,CAAA;CAC9B,MAAM,EAAE,mBAAmB,MAAA,QAAA,SAAA,CAAA,WAAA,QAAM,eAAA,CAAA;CACjC,MAAM,SAAS,YAAY,KAAK,OAAO;AACvC,KAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,eAAe,OAAO,OAAO,EAAE;AAEjD,QAAO,EAAE,MAAM,OAAO,MAAM;;AAG9B,SAAwB,QAAQ,UAA0B,EAAE,EAAU;CACpE,IAAI;CACJ,IAAI;CACJ,IAAI,gBAAyC,EAAE;CAC/C,IAAI,yBAAsC,EAAE;CAC5C,IAAI,iBAAiB;CAErB,MAAM,aAAa,QAAQ,sBAAsB,CAAC,MAAM;CACxD,MAAM,YAAY,QAAQ,gCAAgC;AAE1D,QAAO;EACL,MAAM;EACN,SAAS;EAET,MAAM,eAAe,QAAQ;AAC3B,oBAAiB;GAEjB,MAAM,aAAaC,UAAAA,QAAK,QACtB,OAAO,MACP,QAAQ,cAAc,SACvB;AAED,OAAI;AACF,oBAAgB,MAAMC,eAAAA,cAAc,WAAW;YAE1C,GAAG;AACR,UAAM,IAAI,MACR,qDAAqD,WAAW,kEAEhE,EAAE,OAAO,GAAG,CACb;;;EAIL,MAAM,aAAa;AACjB,4BAAyB,EAAE;AAC3B,OAAI,gBAAgB;AAClB,iBAAA,QAAA,WAAmB;AACnB,qBAAiB;;GAGnB,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAAS,MAAM,kBAAkB,eAAe,OAAO;AAE7D,OAAI,WAAW,OACb,OAAM,IAAI,MACR,gDAAgD,OAAO,QACxD;AAGH,mBAAgB,OAAO;AAEvB,OAAIJ,iBAAAA,wBAAwB,cAAc,CACxC,OAAMK,YAAAA,oBAAoB,eAAe,eAAe,KAAK;QAE1D;IACH,MAAM,EAAE,gBAAgB,MAAA,QAAA,SAAA,CAAA,WAAA,QAAM,YAAA,CAAA;AAC9B,UAAM,YAAY,eAAe,eAAe,KAAK;;GAGvD,MAAM,QAAQ,OAAO,KAAK,cAAc,CAAC;AACzC,kBAAe,OAAO,KACpB,gDAAgD,MAAM,sBACvD;;EAGH,UAAsC,QAAQ,UAAU;AACtD,OAAI,WAAW,qBACb,QAAO;AACT,OAAI,WAAW,sBAAsB;IAEnC,MAAM,SAAS,wBADC,KAAK,aAAa,QAAQ,UACM,YAAY,WAAW,SAAS;AAChF,QAAI,CAAC,OAAO,QACV,wBAAuB,KAAK,OAAO;AACrC,WAAO;;;EAIX,KAAiC,IAAI;AACnC,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;AACxD,OAAI,OAAO,wBAAwB;IACjC,MAAM,UAAU,KAAK,aAAa,QAAQ;IAE1C,MAAM,WAAW,uBAAuB,QAAO,MAAK,EAAE,YAAY,QAAQ;AAC1E,QAAI,SAAS,SAAS,GAAG;KAEvB,MAAM,SAAS,SAAS,GAAG,GAAG;AAC9B,SAAI,OAAO,SAAS,QAClB,OAAM,IAAI,MAAMC,eAAAA,gBAAgB,OAAO,CAAC;AAC1C,SAAI,OAAO,SAAS,OAClB,QAAO,sBAAsB,QAAQ;AACvC,oBAAe,OAAO,KAAK,KAAKC,eAAAA,mBAAmB,OAAO,GAAG;;AAE/D,WAAO,kBAAkB,eAAe,cAAc;;;EAI1D,MAAM,SAAS,OAAO;AACpB,OAAI,MACF;AACF,OAAI,uBAAuB,WAAW,EACpC;AACF,OAAI,cAAc,OAChB;AACF,SAAM,iBAAiB,wBAAwB,eAAe,KAAK;AACnE,gBAAA,QAAA,WAAmB;AACnB,oBAAiB;;EAGnB,eAAe,UAAU,QAAQ;AAC/B,OAAI,eAAe,MAAM,IACvB;GAEF,MAAM,QAAQC,aAAAA,iBACZ,eACA,eACA,SACC,SAAS;AACR,mBAAe,OAAO,KACpB,uEAAuE,KAAK,OAAO,wDAAwD,KAAK,KAAK,KAAK,GAC3J;KAEJ;AAED,OAAI,MAAM,SAAS,GAAG;IACpB,MAAM,UAAU,MAAM,KAAI,MAAK,OAAO,EAAE,IAAI,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK;AAC7E,UAAM,IAAI,MACR,yEAAyE,QAAQ,mFAClF;;;EAIL,gBAAgB,QAAQ;GACtB,MAAM,SAAS,eAAe,UAAU,eAAe;AACvD,UAAO,QAAQ,IAAIL,UAAAA,QAAK,KAAK,QAAQ,QAAQ,CAAC;GAE9C,IAAI;AAEJ,UAAO,QAAQ,GAAG,UAAU,OAAO,SAAS;AAC1C,QAAI,CAACA,UAAAA,QAAK,SAAS,KAAK,CAAC,WAAW,OAAO,CACzC;AAEF,iBAAa,cAAc;AAC3B,oBAAgB,WAAW,YAAY;AACrC,SAAI;MACF,MAAM,SAAS,MAAM,eAAe,eAAe;MACnD,MAAM,SAAS,MAAM,kBAAkB,eAAe,OAAO;AAE7D,UAAI,WAAW,QAAQ;AACrB,sBAAe,OAAO,KACpB,4EAA4E,OAAO,QACpF;AACD;;AAGF,sBAAgB,OAAO;MAEvB,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;MAC1E,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;AAC1E,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,aAAa,WAAW;AAC1B,gCAAyB,EAAE;AAC3B,cAAO,IAAI,KAAK,EAAE,MAAM,eAAe,CAAC;AACxC,sBAAe,OAAO,KACpB,+DACD;;cAGE,GAAG;AACR,qBAAe,OAAO,MACpB,8EAA8E,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GACzH;;OAEF,IAAI;KACP;;EAEL"}
+{"version":3,"file":"plugin.cjs","names":["formatGuardLogEntry","path","fs","process","isStandardEnvDefinition","validateStandardEnv","formatStandardSchemaError","path","loadEnvConfig","generateStandardDts","formatHardError","formatGuardWarning","detectServerLeak"],"sources":["../src/guard.ts","../src/log.ts","../src/sources.ts","../src/virtual.ts","../src/plugin.ts"],"sourcesContent":["export type GuardMode = 'error' | 'stub' | 'warn'\n\nexport type GuardResult\n  = | { allowed: true }\n    | { allowed: false, mode: GuardMode, envName: string, importer: string | undefined }\n\nexport type GuardFail = Extract<GuardResult, { allowed: false }>\n\n/**\n * Determines whether the given Vite environment is allowed to import virtual:env/server.\n * Returns a GuardResult discriminated union — allowed or fail with context.\n * When this.environment is undefined (should not occur with Vite ≥ 8), callers default\n * envName to 'client' — failing closed (restrictive) is safer than failing open.\n */\nexport function checkServerModuleAccess(\n  envName: string,\n  serverEnvironments: string[],\n  mode: GuardMode,\n  importer: string | undefined,\n): GuardResult {\n  if (serverEnvironments.includes(envName))\n    return { allowed: true }\n  return { allowed: false, mode, envName, importer }\n}\n\n/**\n * Generates the stub virtual module returned when onClientAccessOfServerModule is 'stub'.\n * The stub throws at runtime if executed — its message reflects that this import was\n * expected to be unreachable and the assumption was wrong.\n */\nexport function buildServerStubModule(envName: string): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — server-only module stub\nthrow new Error(\n  '[vite-env] virtual:env/server was imported in the \"${envName}\" environment. ' +\n  'This module is server-only and was replaced with a stub. ' +\n  'To allow this environment: add it to serverEnvironments. ' +\n  'To suppress this stub: ensure this import never executes in the \"${envName}\" environment.'\n);`,\n  }\n}\n","// @env node\nimport type { GuardFail } from './guard'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { formatGuardLogEntry } from './format'\n\nconst LOG_HEADER = `# vite-env warnings — generated by @vite-env/core\n# These warnings will become hard errors in 1.0.0.\n# To enforce immediately: ViteEnv({ onClientAccessOfServerModule: 'error' })\n# To acknowledge and suppress: ViteEnv({ onClientAccessOfServerModule: 'stub' })\n# To allow specific environments: ViteEnv({ serverEnvironments: ['ssr', 'workerd'] })`\n\n/**\n * Writes accumulated GuardFail entries to vite-env-warnings.log in the project root.\n * Overwrites on each build — stale entries from previous builds must not persist.\n * Called only in 'warn' mode from buildEnd, after verifying the build succeeded.\n */\nexport async function writeWarningsLog(fails: GuardFail[], root: string): Promise<void> {\n  const seen = new Set<string>()\n  const unique = fails.filter((fail) => {\n    const key = `${fail.envName}::${fail.importer ?? ''}`\n    if (seen.has(key))\n      return false\n    seen.add(key)\n    return true\n  })\n  const timestamp = new Date().toISOString()\n  const entries = unique.map(fail => formatGuardLogEntry(fail, timestamp)).join('\\n\\n')\n  const content = `${LOG_HEADER}\\n\\n${entries}\\n`\n  const filePath = path.join(root, 'vite-env-warnings.log')\n  try {\n    await fs.writeFile(filePath, content, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env-warnings.log to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n","// @env node\nimport type { ResolvedConfig } from 'vite'\nimport process from 'node:process'\nimport { loadEnv } from 'vite'\n\n/**\n * Merge priority (highest → lowest):\n *   1. process.env        (CI pipeline secrets win)\n *   2. .env.[mode].local\n *   3. .env.[mode]\n *   4. .env.local\n *   5. .env\n *\n * Prefix '' = load everything, schema decides what's valid.\n */\nexport async function loadEnvSources(\n  config: ResolvedConfig,\n): Promise<Record<string, string>> {\n  const fileEnv = loadEnv(\n    config.mode,\n    config.envDir || config.root,\n    '', // no prefix filter — schema is the filter\n  )\n\n  return {\n    ...fileEnv,\n    ...filterStrings(process.env),\n  }\n}\n\nfunction filterStrings(env: NodeJS.ProcessEnv): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(env).filter(\n      (entry): entry is [string, string] => typeof entry[1] === 'string',\n    ),\n  )\n}\n","import type { AnyEnvDefinition } from './types'\n\nexport function buildClientModule(\n  def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  const clientKeys = new Set(Object.keys(def.client ?? {}))\n\n  const clientData = Object.fromEntries(\n    Object.entries(data).filter(([k]) => clientKeys.has(k)),\n  )\n\n  return {\n    moduleType: 'js', // Required: Vite 8 / Rolldown explicit moduleType\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(clientData, null, 2)});\nexport default env;`,\n  }\n}\n\nexport function buildServerModule(\n  _def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(data, null, 2)});\nexport default env;`,\n  }\n}\n","// @env node\nimport type { Plugin, ResolvedConfig, Rollup } from 'vite'\nimport type { GuardFail } from './guard'\nimport type { AnyEnvDefinition } from './types'\nimport path from 'node:path'\nimport process from 'node:process'\nimport { loadEnvConfig } from './config'\nimport { generateStandardDts } from './dts'\nimport { formatGuardWarning, formatHardError, formatStandardSchemaError } from './format'\nimport { buildServerStubModule, checkServerModuleAccess } from './guard'\nimport { detectServerLeak } from './leak'\nimport { writeWarningsLog } from './log'\nimport { loadEnvSources } from './sources'\nimport { isStandardEnvDefinition, validateStandardEnv } from './standard'\nimport { buildClientModule, buildServerModule } from './virtual'\n\nexport type ViteEnvOptions = {\n  /**\n   * Path to env definition file.\n   * @default './env.ts' (resolved from project root)\n   */\n  configFile?: string\n\n  /**\n   * Vite 8 environment names that are allowed to import virtual:env/server.\n   * Use this to allow edge runtimes (Cloudflare Workers → 'workerd', Deno Deploy → 'ssr').\n   * @default ['ssr']\n   */\n  serverEnvironments?: string[]\n\n  /**\n   * Behavior when virtual:env/server is imported from a disallowed environment.\n   *\n   * - 'warn'  — Deprecation warning printed to terminal + vite-env-warnings.log written.\n   *             Build succeeds but exits with code 1. Default in 0.x releases.\n   *             The default will change to 'error' in 1.0.0.\n   *\n   * - 'error' — Hard build error. No artifacts emitted.\n   *\n   * - 'stub'  — Returns a module that throws at runtime if the import executes.\n   *             Use for testing environments (Vitest jsdom) or framework isomorphic files\n   *             where the import exists but the code path is never reached in a server context.\n   *\n   * @default 'warn'\n   */\n  onClientAccessOfServerModule?: 'error' | 'stub' | 'warn'\n}\n\n/**\n * Validates environment variables against the definition.\n * Routes to Zod or Standard Schema path based on definition type.\n * Zod modules are loaded dynamically to avoid requiring zod for Standard Schema users.\n */\nasync function validateAndFormat(\n  def: AnyEnvDefinition,\n  rawEnv: Record<string, string>,\n): Promise<{ data: Record<string, unknown> } | { error: string }> {\n  if (isStandardEnvDefinition(def)) {\n    const result = await validateStandardEnv(def, rawEnv)\n    if (!result.success) {\n      return { error: formatStandardSchemaError(result.errors) }\n    }\n    return { data: result.data }\n  }\n\n  const { validateEnv } = await import('./schema')\n  const { formatZodError } = await import('./format')\n  const result = validateEnv(def, rawEnv)\n  if (!result.success) {\n    return { error: formatZodError(result.errors) }\n  }\n  return { data: result.data }\n}\n\nexport default function ViteEnv(options: ViteEnvOptions = {}): Plugin {\n  let resolvedConfig: ResolvedConfig\n  let envDefinition: AnyEnvDefinition\n  let lastValidated: Record<string, unknown> = {}\n  let serverModuleGuardFails: GuardFail[] = []\n  let didSetExitCode = false\n\n  const serverEnvs = options.serverEnvironments ?? ['ssr']\n  const guardMode = options.onClientAccessOfServerModule ?? 'warn'\n\n  return {\n    name: 'vite-env',\n    enforce: 'pre',\n\n    async configResolved(config) {\n      resolvedConfig = config\n\n      const configPath = path.resolve(\n        config.root,\n        options.configFile ?? 'env.ts',\n      )\n\n      try {\n        envDefinition = await loadEnvConfig(configPath)\n      }\n      catch (e) {\n        throw new Error(\n          `[vite-env] Could not load env definition file at: ${configPath}\\n`\n          + `  Create an env.ts file and export default defineEnv({ ... })`,\n          { cause: e },\n        )\n      }\n    },\n\n    async buildStart() {\n      serverModuleGuardFails = []\n      if (didSetExitCode) {\n        process.exitCode = 0\n        didSetExitCode = false\n      }\n\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = await validateAndFormat(envDefinition, rawEnv)\n\n      if ('error' in result) {\n        throw new Error(\n          `[vite-env] Environment validation failed:\\n\\n${result.error}`,\n        )\n      }\n\n      lastValidated = result.data\n\n      if (isStandardEnvDefinition(envDefinition)) {\n        await generateStandardDts(envDefinition, resolvedConfig.root)\n      }\n      else {\n        const { generateDts } = await import('./dts')\n        await generateDts(envDefinition, resolvedConfig.root)\n      }\n\n      const count = Object.keys(lastValidated).length\n      resolvedConfig.logger.info(\n        `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m ${count} variables validated`,\n      )\n    },\n\n    resolveId(this: Rollup.PluginContext, source, importer) {\n      if (source === 'virtual:env/client')\n        return '\\0virtual:env/client'\n      if (source === 'virtual:env/server') {\n        const envName = this.environment?.name ?? 'client'\n        const result = checkServerModuleAccess(envName, serverEnvs, guardMode, importer)\n        if (!result.allowed)\n          serverModuleGuardFails.push(result)\n        return '\\0virtual:env/server'\n      }\n    },\n\n    load(this: Rollup.PluginContext, id) {\n      if (id === '\\0virtual:env/client')\n        return buildClientModule(envDefinition, lastValidated)\n      if (id === '\\0virtual:env/server') {\n        const envName = this.environment?.name ?? 'client'\n        // Filter to fails from this environment only — other envs may have recorded fails for their own loads\n        const envFails = serverModuleGuardFails.filter(f => f.envName === envName)\n        if (envFails.length > 0) {\n          // warn once per load cycle using the last recorded fail; unique importers are written to the log file\n          const latest = envFails.at(-1)!\n          if (latest.mode === 'error')\n            throw new Error(formatHardError(latest))\n          if (latest.mode === 'stub')\n            return buildServerStubModule(envName)\n          resolvedConfig.logger.warn(`\\n${formatGuardWarning(latest)}`)\n        }\n        return buildServerModule(envDefinition, lastValidated)\n      }\n    },\n\n    async buildEnd(error) {\n      if (error)\n        return\n      if (serverModuleGuardFails.length === 0)\n        return\n      if (guardMode !== 'warn')\n        return\n      await writeWarningsLog(serverModuleGuardFails, resolvedConfig.root)\n      process.exitCode = 1\n      didSetExitCode = true\n    },\n\n    generateBundle(this: Rollup.PluginContext, _options, bundle) {\n      if (resolvedConfig.build.ssr)\n        return\n\n      const envName = this.environment?.name ?? 'client'\n      if (serverEnvs.includes(envName))\n        return\n\n      const leaks = detectServerLeak(\n        envDefinition,\n        lastValidated,\n        bundle as Record<string, { type: string, code?: string }>,\n        (keys) => {\n          resolvedConfig.logger.warn(\n            `  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(', ')}`,\n          )\n        },\n      )\n\n      if (leaks.length > 0) {\n        const details = leaks.map(l => `  ✗ ${l.key} found in ${l.chunk}`).join('\\n')\n        throw new Error(\n          `[vite-env] Server environment variables detected in client bundle!\\n\\n${details}\\n\\n  These variables are marked as server-only and must never reach the browser.`,\n        )\n      }\n    },\n\n    configureServer(server) {\n      const envDir = resolvedConfig.envDir || resolvedConfig.root\n      server.watcher.add(path.join(envDir, '.env*'))\n\n      let debounceTimer: ReturnType<typeof setTimeout>\n\n      server.watcher.on('change', async (file) => {\n        if (!path.basename(file).startsWith('.env'))\n          return\n\n        clearTimeout(debounceTimer)\n        debounceTimer = setTimeout(async () => {\n          try {\n            const rawEnv = await loadEnvSources(resolvedConfig)\n            const result = await validateAndFormat(envDefinition, rawEnv)\n\n            if ('error' in result) {\n              resolvedConfig.logger.warn(\n                `\\n  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidation failed:\\n${result.error}`,\n              )\n              return\n            }\n\n            lastValidated = result.data\n\n            const clientMod = server.moduleGraph.getModuleById('\\0virtual:env/client')\n            const serverMod = server.moduleGraph.getModuleById('\\0virtual:env/server')\n            if (clientMod)\n              server.moduleGraph.invalidateModule(clientMod)\n            if (serverMod)\n              server.moduleGraph.invalidateModule(serverMod)\n            if (clientMod || serverMod) {\n              serverModuleGuardFails = []\n              server.hot.send({ type: 'full-reload' })\n              resolvedConfig.logger.info(\n                `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidated`,\n              )\n            }\n          }\n          catch (e) {\n            resolvedConfig.logger.error(\n              `\\n  \\x1B[31m✗\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Failed to reload env files: ${e instanceof Error ? e.message : String(e)}`,\n            )\n          }\n        }, 150)\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAcA,SAAgB,wBACd,SACA,oBACA,MACA,UACa;AACb,KAAI,mBAAmB,SAAS,QAAQ,CACtC,QAAO,EAAE,SAAS,MAAM;AAC1B,QAAO;EAAE,SAAS;EAAO;EAAM;EAAS;EAAU;;;;;;;AAQpD,SAAgB,sBAAsB,SAAqD;AACzF,QAAO;EACL,YAAY;EACZ,MAAM;;wDAE8C,QAAQ;;;sEAGM,QAAQ;;EAE3E;;;;AClCH,MAAM,aAAa;;;;;;;;;;AAWnB,eAAsB,iBAAiB,OAAoB,MAA6B;CACtF,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS;EACpC,MAAM,MAAM,GAAG,KAAK,QAAQ,IAAI,KAAK,YAAY;AACjD,MAAI,KAAK,IAAI,IAAI,CACf,QAAO;AACT,OAAK,IAAI,IAAI;AACb,SAAO;GACP;CACF,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;CAE1C,MAAM,UAAU,GAAG,WAAW,MADd,OAAO,KAAI,SAAQA,eAAAA,oBAAoB,MAAM,UAAU,CAAC,CAAC,KAAK,OAAO,CACzC;CAC5C,MAAM,WAAWC,UAAAA,QAAK,KAAK,MAAM,wBAAwB;AACzD,KAAI;AACF,QAAMC,iBAAAA,QAAG,UAAU,UAAU,SAAS,QAAQ;UAEzC,GAAG;AACR,QAAM,IAAI,MACR,uDAAuD,KAAK,4BAC5D,EAAE,OAAO,GAAG,CACb;;;;;;;;;;;;;;;ACtBL,eAAsB,eACpB,QACiC;AAOjC,QAAO;EACL,IAAA,GAAA,KAAA,SANA,OAAO,MACP,OAAO,UAAU,OAAO,MACxB,GACD;EAIC,GAAG,cAAcC,aAAAA,QAAQ,IAAI;EAC9B;;AAGH,SAAS,cAAc,KAAgD;AACrE,QAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,QACjB,UAAqC,OAAO,MAAM,OAAO,SAC3D,CACF;;;;ACjCH,SAAgB,kBACd,KACA,MACoC;CACpC,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC,CACxD;AAED,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;;EAEpE;;AAGH,SAAgB,kBACd,MACA,MACoC;AACpC,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAE9D;;;;;;;;;ACwBH,eAAe,kBACb,KACA,QACgE;AAChE,KAAIC,iBAAAA,wBAAwB,IAAI,EAAE;EAChC,MAAM,SAAS,MAAMC,iBAAAA,oBAAoB,KAAK,OAAO;AACrD,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAOC,eAAAA,0BAA0B,OAAO,OAAO,EAAE;AAE5D,SAAO,EAAE,MAAM,OAAO,MAAM;;CAG9B,MAAM,EAAE,gBAAgB,MAAA,QAAA,SAAA,CAAA,WAAA,QAAM,eAAA,CAAA;CAC9B,MAAM,EAAE,mBAAmB,MAAA,QAAA,SAAA,CAAA,WAAA,QAAM,eAAA,CAAA;CACjC,MAAM,SAAS,YAAY,KAAK,OAAO;AACvC,KAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,eAAe,OAAO,OAAO,EAAE;AAEjD,QAAO,EAAE,MAAM,OAAO,MAAM;;AAG9B,SAAwB,QAAQ,UAA0B,EAAE,EAAU;CACpE,IAAI;CACJ,IAAI;CACJ,IAAI,gBAAyC,EAAE;CAC/C,IAAI,yBAAsC,EAAE;CAC5C,IAAI,iBAAiB;CAErB,MAAM,aAAa,QAAQ,sBAAsB,CAAC,MAAM;CACxD,MAAM,YAAY,QAAQ,gCAAgC;AAE1D,QAAO;EACL,MAAM;EACN,SAAS;EAET,MAAM,eAAe,QAAQ;AAC3B,oBAAiB;GAEjB,MAAM,aAAaC,UAAAA,QAAK,QACtB,OAAO,MACP,QAAQ,cAAc,SACvB;AAED,OAAI;AACF,oBAAgB,MAAMC,eAAAA,cAAc,WAAW;YAE1C,GAAG;AACR,UAAM,IAAI,MACR,qDAAqD,WAAW,kEAEhE,EAAE,OAAO,GAAG,CACb;;;EAIL,MAAM,aAAa;AACjB,4BAAyB,EAAE;AAC3B,OAAI,gBAAgB;AAClB,iBAAA,QAAA,WAAmB;AACnB,qBAAiB;;GAGnB,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAAS,MAAM,kBAAkB,eAAe,OAAO;AAE7D,OAAI,WAAW,OACb,OAAM,IAAI,MACR,gDAAgD,OAAO,QACxD;AAGH,mBAAgB,OAAO;AAEvB,OAAIJ,iBAAAA,wBAAwB,cAAc,CACxC,OAAMK,YAAAA,oBAAoB,eAAe,eAAe,KAAK;QAE1D;IACH,MAAM,EAAE,gBAAgB,MAAA,QAAA,SAAA,CAAA,WAAA,QAAM,YAAA,CAAA;AAC9B,UAAM,YAAY,eAAe,eAAe,KAAK;;GAGvD,MAAM,QAAQ,OAAO,KAAK,cAAc,CAAC;AACzC,kBAAe,OAAO,KACpB,gDAAgD,MAAM,sBACvD;;EAGH,UAAsC,QAAQ,UAAU;AACtD,OAAI,WAAW,qBACb,QAAO;AACT,OAAI,WAAW,sBAAsB;IAEnC,MAAM,SAAS,wBADC,KAAK,aAAa,QAAQ,UACM,YAAY,WAAW,SAAS;AAChF,QAAI,CAAC,OAAO,QACV,wBAAuB,KAAK,OAAO;AACrC,WAAO;;;EAIX,KAAiC,IAAI;AACnC,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;AACxD,OAAI,OAAO,wBAAwB;IACjC,MAAM,UAAU,KAAK,aAAa,QAAQ;IAE1C,MAAM,WAAW,uBAAuB,QAAO,MAAK,EAAE,YAAY,QAAQ;AAC1E,QAAI,SAAS,SAAS,GAAG;KAEvB,MAAM,SAAS,SAAS,GAAG,GAAG;AAC9B,SAAI,OAAO,SAAS,QAClB,OAAM,IAAI,MAAMC,eAAAA,gBAAgB,OAAO,CAAC;AAC1C,SAAI,OAAO,SAAS,OAClB,QAAO,sBAAsB,QAAQ;AACvC,oBAAe,OAAO,KAAK,KAAKC,eAAAA,mBAAmB,OAAO,GAAG;;AAE/D,WAAO,kBAAkB,eAAe,cAAc;;;EAI1D,MAAM,SAAS,OAAO;AACpB,OAAI,MACF;AACF,OAAI,uBAAuB,WAAW,EACpC;AACF,OAAI,cAAc,OAChB;AACF,SAAM,iBAAiB,wBAAwB,eAAe,KAAK;AACnE,gBAAA,QAAA,WAAmB;AACnB,oBAAiB;;EAGnB,eAA2C,UAAU,QAAQ;AAC3D,OAAI,eAAe,MAAM,IACvB;GAEF,MAAM,UAAU,KAAK,aAAa,QAAQ;AAC1C,OAAI,WAAW,SAAS,QAAQ,CAC9B;GAEF,MAAM,QAAQC,aAAAA,iBACZ,eACA,eACA,SACC,SAAS;AACR,mBAAe,OAAO,KACpB,uEAAuE,KAAK,OAAO,wDAAwD,KAAK,KAAK,KAAK,GAC3J;KAEJ;AAED,OAAI,MAAM,SAAS,GAAG;IACpB,MAAM,UAAU,MAAM,KAAI,MAAK,OAAO,EAAE,IAAI,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK;AAC7E,UAAM,IAAI,MACR,yEAAyE,QAAQ,mFAClF;;;EAIL,gBAAgB,QAAQ;GACtB,MAAM,SAAS,eAAe,UAAU,eAAe;AACvD,UAAO,QAAQ,IAAIL,UAAAA,QAAK,KAAK,QAAQ,QAAQ,CAAC;GAE9C,IAAI;AAEJ,UAAO,QAAQ,GAAG,UAAU,OAAO,SAAS;AAC1C,QAAI,CAACA,UAAAA,QAAK,SAAS,KAAK,CAAC,WAAW,OAAO,CACzC;AAEF,iBAAa,cAAc;AAC3B,oBAAgB,WAAW,YAAY;AACrC,SAAI;MACF,MAAM,SAAS,MAAM,eAAe,eAAe;MACnD,MAAM,SAAS,MAAM,kBAAkB,eAAe,OAAO;AAE7D,UAAI,WAAW,QAAQ;AACrB,sBAAe,OAAO,KACpB,4EAA4E,OAAO,QACpF;AACD;;AAGF,sBAAgB,OAAO;MAEvB,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;MAC1E,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;AAC1E,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,aAAa,WAAW;AAC1B,gCAAyB,EAAE;AAC3B,cAAO,IAAI,KAAK,EAAE,MAAM,eAAe,CAAC;AACxC,sBAAe,OAAO,KACpB,+DACD;;cAGE,GAAG;AACR,qBAAe,OAAO,MACpB,8EAA8E,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GACzH;;OAEF,IAAI;KACP;;EAEL"}

package/dist/plugin.d.cts

@@ -1,7 +1,7 @@
 import { Plugin } from "vite";
 
 //#region src/plugin.d.ts
-interface ViteEnvOptions {
+type ViteEnvOptions = {
   /**
    * Path to env definition file.
    * @default './env.ts' (resolved from project root)
@@ -29,7 +29,7 @@ interface ViteEnvOptions {
    * @default 'warn'
    */
   onClientAccessOfServerModule?: 'error' | 'stub' | 'warn';
-}
+};
 declare function ViteEnv(options?: ViteEnvOptions): Plugin;
 //#endregion
 export { ViteEnvOptions, ViteEnv as default };

package/dist/plugin.d.mts

@@ -1,7 +1,7 @@
 import { Plugin } from "vite";
 
 //#region src/plugin.d.ts
-interface ViteEnvOptions {
+type ViteEnvOptions = {
   /**
    * Path to env definition file.
    * @default './env.ts' (resolved from project root)
@@ -29,7 +29,7 @@ interface ViteEnvOptions {
    * @default 'warn'
    */
   onClientAccessOfServerModule?: 'error' | 'stub' | 'warn';
-}
+};
 declare function ViteEnv(options?: ViteEnvOptions): Plugin;
 //#endregion
 export { ViteEnvOptions, ViteEnv as default };

package/dist/plugin.mjs

@@ -199,6 +199,8 @@ function ViteEnv(options = {}) {
 		},
 		generateBundle(_options, bundle) {
 			if (resolvedConfig.build.ssr) return;
+			const envName = this.environment?.name ?? "client";
+			if (serverEnvs.includes(envName)) return;
 			const leaks = detectServerLeak(envDefinition, lastValidated, bundle, (keys) => {
 				resolvedConfig.logger.warn(`  \x1B[33m⚠\x1B[0m \x1B[36m[vite-env]\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(", ")}`);
 			});

package/dist/plugin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.mjs","names":[],"sources":["../src/guard.ts","../src/log.ts","../src/sources.ts","../src/virtual.ts","../src/plugin.ts"],"sourcesContent":["export type GuardMode = 'error' | 'stub' | 'warn'\n\nexport type GuardResult\n  = | { allowed: true }\n    | { allowed: false, mode: GuardMode, envName: string, importer: string | undefined }\n\nexport type GuardFail = Extract<GuardResult, { allowed: false }>\n\n/**\n * Determines whether the given Vite environment is allowed to import virtual:env/server.\n * Returns a GuardResult discriminated union — allowed or fail with context.\n * When this.environment is undefined (should not occur with Vite ≥ 8), callers default\n * envName to 'client' — failing closed (restrictive) is safer than failing open.\n */\nexport function checkServerModuleAccess(\n  envName: string,\n  serverEnvironments: string[],\n  mode: GuardMode,\n  importer: string | undefined,\n): GuardResult {\n  if (serverEnvironments.includes(envName))\n    return { allowed: true }\n  return { allowed: false, mode, envName, importer }\n}\n\n/**\n * Generates the stub virtual module returned when onClientAccessOfServerModule is 'stub'.\n * The stub throws at runtime if executed — its message reflects that this import was\n * expected to be unreachable and the assumption was wrong.\n */\nexport function buildServerStubModule(envName: string): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — server-only module stub\nthrow new Error(\n  '[vite-env] virtual:env/server was imported in the \"${envName}\" environment. ' +\n  'This module is server-only and was replaced with a stub. ' +\n  'To allow this environment: add it to serverEnvironments. ' +\n  'To suppress this stub: ensure this import never executes in the \"${envName}\" environment.'\n);`,\n  }\n}\n","// @env node\nimport type { GuardFail } from './guard'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { formatGuardLogEntry } from './format'\n\nconst LOG_HEADER = `# vite-env warnings — generated by @vite-env/core\n# These warnings will become hard errors in 1.0.0.\n# To enforce immediately: ViteEnv({ onClientAccessOfServerModule: 'error' })\n# To acknowledge and suppress: ViteEnv({ onClientAccessOfServerModule: 'stub' })\n# To allow specific environments: ViteEnv({ serverEnvironments: ['ssr', 'workerd'] })`\n\n/**\n * Writes accumulated GuardFail entries to vite-env-warnings.log in the project root.\n * Overwrites on each build — stale entries from previous builds must not persist.\n * Called only in 'warn' mode from buildEnd, after verifying the build succeeded.\n */\nexport async function writeWarningsLog(fails: GuardFail[], root: string): Promise<void> {\n  const seen = new Set<string>()\n  const unique = fails.filter((fail) => {\n    const key = `${fail.envName}::${fail.importer ?? ''}`\n    if (seen.has(key))\n      return false\n    seen.add(key)\n    return true\n  })\n  const timestamp = new Date().toISOString()\n  const entries = unique.map(fail => formatGuardLogEntry(fail, timestamp)).join('\\n\\n')\n  const content = `${LOG_HEADER}\\n\\n${entries}\\n`\n  const filePath = path.join(root, 'vite-env-warnings.log')\n  try {\n    await fs.writeFile(filePath, content, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env-warnings.log to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n","// @env node\nimport type { ResolvedConfig } from 'vite'\nimport process from 'node:process'\nimport { loadEnv } from 'vite'\n\n/**\n * Merge priority (highest → lowest):\n *   1. process.env        (CI pipeline secrets win)\n *   2. .env.[mode].local\n *   3. .env.[mode]\n *   4. .env.local\n *   5. .env\n *\n * Prefix '' = load everything, schema decides what's valid.\n */\nexport async function loadEnvSources(\n  config: ResolvedConfig,\n): Promise<Record<string, string>> {\n  const fileEnv = loadEnv(\n    config.mode,\n    config.envDir || config.root,\n    '', // no prefix filter — schema is the filter\n  )\n\n  return {\n    ...fileEnv,\n    ...filterStrings(process.env),\n  }\n}\n\nfunction filterStrings(env: NodeJS.ProcessEnv): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(env).filter(\n      (entry): entry is [string, string] => typeof entry[1] === 'string',\n    ),\n  )\n}\n","import type { AnyEnvDefinition } from './types'\n\nexport function buildClientModule(\n  def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  const clientKeys = new Set(Object.keys(def.client ?? {}))\n\n  const clientData = Object.fromEntries(\n    Object.entries(data).filter(([k]) => clientKeys.has(k)),\n  )\n\n  return {\n    moduleType: 'js', // Required: Vite 8 / Rolldown explicit moduleType\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(clientData, null, 2)});\nexport default env;`,\n  }\n}\n\nexport function buildServerModule(\n  _def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(data, null, 2)});\nexport default env;`,\n  }\n}\n","// @env node\nimport type { Plugin, ResolvedConfig, Rollup } from 'vite'\nimport type { GuardFail } from './guard'\nimport type { AnyEnvDefinition } from './types'\nimport path from 'node:path'\nimport process from 'node:process'\nimport { loadEnvConfig } from './config'\nimport { generateStandardDts } from './dts'\nimport { formatGuardWarning, formatHardError, formatStandardSchemaError } from './format'\nimport { buildServerStubModule, checkServerModuleAccess } from './guard'\nimport { detectServerLeak } from './leak'\nimport { writeWarningsLog } from './log'\nimport { loadEnvSources } from './sources'\nimport { isStandardEnvDefinition, validateStandardEnv } from './standard'\nimport { buildClientModule, buildServerModule } from './virtual'\n\nexport interface ViteEnvOptions {\n  /**\n   * Path to env definition file.\n   * @default './env.ts' (resolved from project root)\n   */\n  configFile?: string\n\n  /**\n   * Vite 8 environment names that are allowed to import virtual:env/server.\n   * Use this to allow edge runtimes (Cloudflare Workers → 'workerd', Deno Deploy → 'ssr').\n   * @default ['ssr']\n   */\n  serverEnvironments?: string[]\n\n  /**\n   * Behavior when virtual:env/server is imported from a disallowed environment.\n   *\n   * - 'warn'  — Deprecation warning printed to terminal + vite-env-warnings.log written.\n   *             Build succeeds but exits with code 1. Default in 0.x releases.\n   *             The default will change to 'error' in 1.0.0.\n   *\n   * - 'error' — Hard build error. No artifacts emitted.\n   *\n   * - 'stub'  — Returns a module that throws at runtime if the import executes.\n   *             Use for testing environments (Vitest jsdom) or framework isomorphic files\n   *             where the import exists but the code path is never reached in a server context.\n   *\n   * @default 'warn'\n   */\n  onClientAccessOfServerModule?: 'error' | 'stub' | 'warn'\n}\n\n/**\n * Validates environment variables against the definition.\n * Routes to Zod or Standard Schema path based on definition type.\n * Zod modules are loaded dynamically to avoid requiring zod for Standard Schema users.\n */\nasync function validateAndFormat(\n  def: AnyEnvDefinition,\n  rawEnv: Record<string, string>,\n): Promise<{ data: Record<string, unknown> } | { error: string }> {\n  if (isStandardEnvDefinition(def)) {\n    const result = await validateStandardEnv(def, rawEnv)\n    if (!result.success) {\n      return { error: formatStandardSchemaError(result.errors) }\n    }\n    return { data: result.data }\n  }\n\n  const { validateEnv } = await import('./schema')\n  const { formatZodError } = await import('./format')\n  const result = validateEnv(def, rawEnv)\n  if (!result.success) {\n    return { error: formatZodError(result.errors) }\n  }\n  return { data: result.data }\n}\n\nexport default function ViteEnv(options: ViteEnvOptions = {}): Plugin {\n  let resolvedConfig: ResolvedConfig\n  let envDefinition: AnyEnvDefinition\n  let lastValidated: Record<string, unknown> = {}\n  let serverModuleGuardFails: GuardFail[] = []\n  let didSetExitCode = false\n\n  const serverEnvs = options.serverEnvironments ?? ['ssr']\n  const guardMode = options.onClientAccessOfServerModule ?? 'warn'\n\n  return {\n    name: 'vite-env',\n    enforce: 'pre',\n\n    async configResolved(config) {\n      resolvedConfig = config\n\n      const configPath = path.resolve(\n        config.root,\n        options.configFile ?? 'env.ts',\n      )\n\n      try {\n        envDefinition = await loadEnvConfig(configPath)\n      }\n      catch (e) {\n        throw new Error(\n          `[vite-env] Could not load env definition file at: ${configPath}\\n`\n          + `  Create an env.ts file and export default defineEnv({ ... })`,\n          { cause: e },\n        )\n      }\n    },\n\n    async buildStart() {\n      serverModuleGuardFails = []\n      if (didSetExitCode) {\n        process.exitCode = 0\n        didSetExitCode = false\n      }\n\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = await validateAndFormat(envDefinition, rawEnv)\n\n      if ('error' in result) {\n        throw new Error(\n          `[vite-env] Environment validation failed:\\n\\n${result.error}`,\n        )\n      }\n\n      lastValidated = result.data\n\n      if (isStandardEnvDefinition(envDefinition)) {\n        await generateStandardDts(envDefinition, resolvedConfig.root)\n      }\n      else {\n        const { generateDts } = await import('./dts')\n        await generateDts(envDefinition, resolvedConfig.root)\n      }\n\n      const count = Object.keys(lastValidated).length\n      resolvedConfig.logger.info(\n        `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m ${count} variables validated`,\n      )\n    },\n\n    resolveId(this: Rollup.PluginContext, source, importer) {\n      if (source === 'virtual:env/client')\n        return '\\0virtual:env/client'\n      if (source === 'virtual:env/server') {\n        const envName = this.environment?.name ?? 'client'\n        const result = checkServerModuleAccess(envName, serverEnvs, guardMode, importer)\n        if (!result.allowed)\n          serverModuleGuardFails.push(result)\n        return '\\0virtual:env/server'\n      }\n    },\n\n    load(this: Rollup.PluginContext, id) {\n      if (id === '\\0virtual:env/client')\n        return buildClientModule(envDefinition, lastValidated)\n      if (id === '\\0virtual:env/server') {\n        const envName = this.environment?.name ?? 'client'\n        // Filter to fails from this environment only — other envs may have recorded fails for their own loads\n        const envFails = serverModuleGuardFails.filter(f => f.envName === envName)\n        if (envFails.length > 0) {\n          // warn once per load cycle using the last recorded fail; unique importers are written to the log file\n          const latest = envFails.at(-1)!\n          if (latest.mode === 'error')\n            throw new Error(formatHardError(latest))\n          if (latest.mode === 'stub')\n            return buildServerStubModule(envName)\n          resolvedConfig.logger.warn(`\\n${formatGuardWarning(latest)}`)\n        }\n        return buildServerModule(envDefinition, lastValidated)\n      }\n    },\n\n    async buildEnd(error) {\n      if (error)\n        return\n      if (serverModuleGuardFails.length === 0)\n        return\n      if (guardMode !== 'warn')\n        return\n      await writeWarningsLog(serverModuleGuardFails, resolvedConfig.root)\n      process.exitCode = 1\n      didSetExitCode = true\n    },\n\n    generateBundle(_options, bundle) {\n      if (resolvedConfig.build.ssr)\n        return\n\n      const leaks = detectServerLeak(\n        envDefinition,\n        lastValidated,\n        bundle as Record<string, { type: string, code?: string }>,\n        (keys) => {\n          resolvedConfig.logger.warn(\n            `  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(', ')}`,\n          )\n        },\n      )\n\n      if (leaks.length > 0) {\n        const details = leaks.map(l => `  ✗ ${l.key} found in ${l.chunk}`).join('\\n')\n        throw new Error(\n          `[vite-env] Server environment variables detected in client bundle!\\n\\n${details}\\n\\n  These variables are marked as server-only and must never reach the browser.`,\n        )\n      }\n    },\n\n    configureServer(server) {\n      const envDir = resolvedConfig.envDir || resolvedConfig.root\n      server.watcher.add(path.join(envDir, '.env*'))\n\n      let debounceTimer: ReturnType<typeof setTimeout>\n\n      server.watcher.on('change', async (file) => {\n        if (!path.basename(file).startsWith('.env'))\n          return\n\n        clearTimeout(debounceTimer)\n        debounceTimer = setTimeout(async () => {\n          try {\n            const rawEnv = await loadEnvSources(resolvedConfig)\n            const result = await validateAndFormat(envDefinition, rawEnv)\n\n            if ('error' in result) {\n              resolvedConfig.logger.warn(\n                `\\n  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidation failed:\\n${result.error}`,\n              )\n              return\n            }\n\n            lastValidated = result.data\n\n            const clientMod = server.moduleGraph.getModuleById('\\0virtual:env/client')\n            const serverMod = server.moduleGraph.getModuleById('\\0virtual:env/server')\n            if (clientMod)\n              server.moduleGraph.invalidateModule(clientMod)\n            if (serverMod)\n              server.moduleGraph.invalidateModule(serverMod)\n            if (clientMod || serverMod) {\n              serverModuleGuardFails = []\n              server.hot.send({ type: 'full-reload' })\n              resolvedConfig.logger.info(\n                `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidated`,\n              )\n            }\n          }\n          catch (e) {\n            resolvedConfig.logger.error(\n              `\\n  \\x1B[31m✗\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Failed to reload env files: ${e instanceof Error ? e.message : String(e)}`,\n            )\n          }\n        }, 150)\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAcA,SAAgB,wBACd,SACA,oBACA,MACA,UACa;AACb,KAAI,mBAAmB,SAAS,QAAQ,CACtC,QAAO,EAAE,SAAS,MAAM;AAC1B,QAAO;EAAE,SAAS;EAAO;EAAM;EAAS;EAAU;;;;;;;AAQpD,SAAgB,sBAAsB,SAAqD;AACzF,QAAO;EACL,YAAY;EACZ,MAAM;;wDAE8C,QAAQ;;;sEAGM,QAAQ;;EAE3E;;;;AClCH,MAAM,aAAa;;;;;;;;;;AAWnB,eAAsB,iBAAiB,OAAoB,MAA6B;CACtF,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS;EACpC,MAAM,MAAM,GAAG,KAAK,QAAQ,IAAI,KAAK,YAAY;AACjD,MAAI,KAAK,IAAI,IAAI,CACf,QAAO;AACT,OAAK,IAAI,IAAI;AACb,SAAO;GACP;CACF,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;CAE1C,MAAM,UAAU,GAAG,WAAW,MADd,OAAO,KAAI,SAAQ,oBAAoB,MAAM,UAAU,CAAC,CAAC,KAAK,OAAO,CACzC;CAC5C,MAAM,WAAW,KAAK,KAAK,MAAM,wBAAwB;AACzD,KAAI;AACF,QAAM,GAAG,UAAU,UAAU,SAAS,QAAQ;UAEzC,GAAG;AACR,QAAM,IAAI,MACR,uDAAuD,KAAK,4BAC5D,EAAE,OAAO,GAAG,CACb;;;;;;;;;;;;;;;ACtBL,eAAsB,eACpB,QACiC;AAOjC,QAAO;EACL,GAPc,QACd,OAAO,MACP,OAAO,UAAU,OAAO,MACxB,GACD;EAIC,GAAG,cAAc,QAAQ,IAAI;EAC9B;;AAGH,SAAS,cAAc,KAAgD;AACrE,QAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,QACjB,UAAqC,OAAO,MAAM,OAAO,SAC3D,CACF;;;;ACjCH,SAAgB,kBACd,KACA,MACoC;CACpC,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC,CACxD;AAED,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;;EAEpE;;AAGH,SAAgB,kBACd,MACA,MACoC;AACpC,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAE9D;;;;;;;;;ACwBH,eAAe,kBACb,KACA,QACgE;AAChE,KAAI,wBAAwB,IAAI,EAAE;EAChC,MAAM,SAAS,MAAM,oBAAoB,KAAK,OAAO;AACrD,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,0BAA0B,OAAO,OAAO,EAAE;AAE5D,SAAO,EAAE,MAAM,OAAO,MAAM;;CAG9B,MAAM,EAAE,gBAAgB,MAAM,OAAO;CACrC,MAAM,EAAE,mBAAmB,MAAM,OAAO;CACxC,MAAM,SAAS,YAAY,KAAK,OAAO;AACvC,KAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,eAAe,OAAO,OAAO,EAAE;AAEjD,QAAO,EAAE,MAAM,OAAO,MAAM;;AAG9B,SAAwB,QAAQ,UAA0B,EAAE,EAAU;CACpE,IAAI;CACJ,IAAI;CACJ,IAAI,gBAAyC,EAAE;CAC/C,IAAI,yBAAsC,EAAE;CAC5C,IAAI,iBAAiB;CAErB,MAAM,aAAa,QAAQ,sBAAsB,CAAC,MAAM;CACxD,MAAM,YAAY,QAAQ,gCAAgC;AAE1D,QAAO;EACL,MAAM;EACN,SAAS;EAET,MAAM,eAAe,QAAQ;AAC3B,oBAAiB;GAEjB,MAAM,aAAa,KAAK,QACtB,OAAO,MACP,QAAQ,cAAc,SACvB;AAED,OAAI;AACF,oBAAgB,MAAM,cAAc,WAAW;YAE1C,GAAG;AACR,UAAM,IAAI,MACR,qDAAqD,WAAW,kEAEhE,EAAE,OAAO,GAAG,CACb;;;EAIL,MAAM,aAAa;AACjB,4BAAyB,EAAE;AAC3B,OAAI,gBAAgB;AAClB,YAAQ,WAAW;AACnB,qBAAiB;;GAGnB,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAAS,MAAM,kBAAkB,eAAe,OAAO;AAE7D,OAAI,WAAW,OACb,OAAM,IAAI,MACR,gDAAgD,OAAO,QACxD;AAGH,mBAAgB,OAAO;AAEvB,OAAI,wBAAwB,cAAc,CACxC,OAAM,oBAAoB,eAAe,eAAe,KAAK;QAE1D;IACH,MAAM,EAAE,gBAAgB,MAAM,OAAO;AACrC,UAAM,YAAY,eAAe,eAAe,KAAK;;GAGvD,MAAM,QAAQ,OAAO,KAAK,cAAc,CAAC;AACzC,kBAAe,OAAO,KACpB,gDAAgD,MAAM,sBACvD;;EAGH,UAAsC,QAAQ,UAAU;AACtD,OAAI,WAAW,qBACb,QAAO;AACT,OAAI,WAAW,sBAAsB;IAEnC,MAAM,SAAS,wBADC,KAAK,aAAa,QAAQ,UACM,YAAY,WAAW,SAAS;AAChF,QAAI,CAAC,OAAO,QACV,wBAAuB,KAAK,OAAO;AACrC,WAAO;;;EAIX,KAAiC,IAAI;AACnC,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;AACxD,OAAI,OAAO,wBAAwB;IACjC,MAAM,UAAU,KAAK,aAAa,QAAQ;IAE1C,MAAM,WAAW,uBAAuB,QAAO,MAAK,EAAE,YAAY,QAAQ;AAC1E,QAAI,SAAS,SAAS,GAAG;KAEvB,MAAM,SAAS,SAAS,GAAG,GAAG;AAC9B,SAAI,OAAO,SAAS,QAClB,OAAM,IAAI,MAAM,gBAAgB,OAAO,CAAC;AAC1C,SAAI,OAAO,SAAS,OAClB,QAAO,sBAAsB,QAAQ;AACvC,oBAAe,OAAO,KAAK,KAAK,mBAAmB,OAAO,GAAG;;AAE/D,WAAO,kBAAkB,eAAe,cAAc;;;EAI1D,MAAM,SAAS,OAAO;AACpB,OAAI,MACF;AACF,OAAI,uBAAuB,WAAW,EACpC;AACF,OAAI,cAAc,OAChB;AACF,SAAM,iBAAiB,wBAAwB,eAAe,KAAK;AACnE,WAAQ,WAAW;AACnB,oBAAiB;;EAGnB,eAAe,UAAU,QAAQ;AAC/B,OAAI,eAAe,MAAM,IACvB;GAEF,MAAM,QAAQ,iBACZ,eACA,eACA,SACC,SAAS;AACR,mBAAe,OAAO,KACpB,uEAAuE,KAAK,OAAO,wDAAwD,KAAK,KAAK,KAAK,GAC3J;KAEJ;AAED,OAAI,MAAM,SAAS,GAAG;IACpB,MAAM,UAAU,MAAM,KAAI,MAAK,OAAO,EAAE,IAAI,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK;AAC7E,UAAM,IAAI,MACR,yEAAyE,QAAQ,mFAClF;;;EAIL,gBAAgB,QAAQ;GACtB,MAAM,SAAS,eAAe,UAAU,eAAe;AACvD,UAAO,QAAQ,IAAI,KAAK,KAAK,QAAQ,QAAQ,CAAC;GAE9C,IAAI;AAEJ,UAAO,QAAQ,GAAG,UAAU,OAAO,SAAS;AAC1C,QAAI,CAAC,KAAK,SAAS,KAAK,CAAC,WAAW,OAAO,CACzC;AAEF,iBAAa,cAAc;AAC3B,oBAAgB,WAAW,YAAY;AACrC,SAAI;MACF,MAAM,SAAS,MAAM,eAAe,eAAe;MACnD,MAAM,SAAS,MAAM,kBAAkB,eAAe,OAAO;AAE7D,UAAI,WAAW,QAAQ;AACrB,sBAAe,OAAO,KACpB,4EAA4E,OAAO,QACpF;AACD;;AAGF,sBAAgB,OAAO;MAEvB,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;MAC1E,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;AAC1E,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,aAAa,WAAW;AAC1B,gCAAyB,EAAE;AAC3B,cAAO,IAAI,KAAK,EAAE,MAAM,eAAe,CAAC;AACxC,sBAAe,OAAO,KACpB,+DACD;;cAGE,GAAG;AACR,qBAAe,OAAO,MACpB,8EAA8E,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GACzH;;OAEF,IAAI;KACP;;EAEL"}
+{"version":3,"file":"plugin.mjs","names":[],"sources":["../src/guard.ts","../src/log.ts","../src/sources.ts","../src/virtual.ts","../src/plugin.ts"],"sourcesContent":["export type GuardMode = 'error' | 'stub' | 'warn'\n\nexport type GuardResult\n  = | { allowed: true }\n    | { allowed: false, mode: GuardMode, envName: string, importer: string | undefined }\n\nexport type GuardFail = Extract<GuardResult, { allowed: false }>\n\n/**\n * Determines whether the given Vite environment is allowed to import virtual:env/server.\n * Returns a GuardResult discriminated union — allowed or fail with context.\n * When this.environment is undefined (should not occur with Vite ≥ 8), callers default\n * envName to 'client' — failing closed (restrictive) is safer than failing open.\n */\nexport function checkServerModuleAccess(\n  envName: string,\n  serverEnvironments: string[],\n  mode: GuardMode,\n  importer: string | undefined,\n): GuardResult {\n  if (serverEnvironments.includes(envName))\n    return { allowed: true }\n  return { allowed: false, mode, envName, importer }\n}\n\n/**\n * Generates the stub virtual module returned when onClientAccessOfServerModule is 'stub'.\n * The stub throws at runtime if executed — its message reflects that this import was\n * expected to be unreachable and the assumption was wrong.\n */\nexport function buildServerStubModule(envName: string): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — server-only module stub\nthrow new Error(\n  '[vite-env] virtual:env/server was imported in the \"${envName}\" environment. ' +\n  'This module is server-only and was replaced with a stub. ' +\n  'To allow this environment: add it to serverEnvironments. ' +\n  'To suppress this stub: ensure this import never executes in the \"${envName}\" environment.'\n);`,\n  }\n}\n","// @env node\nimport type { GuardFail } from './guard'\nimport fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { formatGuardLogEntry } from './format'\n\nconst LOG_HEADER = `# vite-env warnings — generated by @vite-env/core\n# These warnings will become hard errors in 1.0.0.\n# To enforce immediately: ViteEnv({ onClientAccessOfServerModule: 'error' })\n# To acknowledge and suppress: ViteEnv({ onClientAccessOfServerModule: 'stub' })\n# To allow specific environments: ViteEnv({ serverEnvironments: ['ssr', 'workerd'] })`\n\n/**\n * Writes accumulated GuardFail entries to vite-env-warnings.log in the project root.\n * Overwrites on each build — stale entries from previous builds must not persist.\n * Called only in 'warn' mode from buildEnd, after verifying the build succeeded.\n */\nexport async function writeWarningsLog(fails: GuardFail[], root: string): Promise<void> {\n  const seen = new Set<string>()\n  const unique = fails.filter((fail) => {\n    const key = `${fail.envName}::${fail.importer ?? ''}`\n    if (seen.has(key))\n      return false\n    seen.add(key)\n    return true\n  })\n  const timestamp = new Date().toISOString()\n  const entries = unique.map(fail => formatGuardLogEntry(fail, timestamp)).join('\\n\\n')\n  const content = `${LOG_HEADER}\\n\\n${entries}\\n`\n  const filePath = path.join(root, 'vite-env-warnings.log')\n  try {\n    await fs.writeFile(filePath, content, 'utf-8')\n  }\n  catch (e) {\n    throw new Error(\n      `[vite-env] Failed to write vite-env-warnings.log to ${root}. Check file permissions.`,\n      { cause: e },\n    )\n  }\n}\n","// @env node\nimport type { ResolvedConfig } from 'vite'\nimport process from 'node:process'\nimport { loadEnv } from 'vite'\n\n/**\n * Merge priority (highest → lowest):\n *   1. process.env        (CI pipeline secrets win)\n *   2. .env.[mode].local\n *   3. .env.[mode]\n *   4. .env.local\n *   5. .env\n *\n * Prefix '' = load everything, schema decides what's valid.\n */\nexport async function loadEnvSources(\n  config: ResolvedConfig,\n): Promise<Record<string, string>> {\n  const fileEnv = loadEnv(\n    config.mode,\n    config.envDir || config.root,\n    '', // no prefix filter — schema is the filter\n  )\n\n  return {\n    ...fileEnv,\n    ...filterStrings(process.env),\n  }\n}\n\nfunction filterStrings(env: NodeJS.ProcessEnv): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(env).filter(\n      (entry): entry is [string, string] => typeof entry[1] === 'string',\n    ),\n  )\n}\n","import type { AnyEnvDefinition } from './types'\n\nexport function buildClientModule(\n  def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  const clientKeys = new Set(Object.keys(def.client ?? {}))\n\n  const clientData = Object.fromEntries(\n    Object.entries(data).filter(([k]) => clientKeys.has(k)),\n  )\n\n  return {\n    moduleType: 'js', // Required: Vite 8 / Rolldown explicit moduleType\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(clientData, null, 2)});\nexport default env;`,\n  }\n}\n\nexport function buildServerModule(\n  _def: AnyEnvDefinition,\n  data: Record<string, unknown>,\n): { code: string, moduleType: 'js' } {\n  return {\n    moduleType: 'js',\n    code: `// Auto-generated by @vite-env/core — do not edit\nexport const env = Object.freeze(${JSON.stringify(data, null, 2)});\nexport default env;`,\n  }\n}\n","// @env node\nimport type { Plugin, ResolvedConfig, Rollup } from 'vite'\nimport type { GuardFail } from './guard'\nimport type { AnyEnvDefinition } from './types'\nimport path from 'node:path'\nimport process from 'node:process'\nimport { loadEnvConfig } from './config'\nimport { generateStandardDts } from './dts'\nimport { formatGuardWarning, formatHardError, formatStandardSchemaError } from './format'\nimport { buildServerStubModule, checkServerModuleAccess } from './guard'\nimport { detectServerLeak } from './leak'\nimport { writeWarningsLog } from './log'\nimport { loadEnvSources } from './sources'\nimport { isStandardEnvDefinition, validateStandardEnv } from './standard'\nimport { buildClientModule, buildServerModule } from './virtual'\n\nexport type ViteEnvOptions = {\n  /**\n   * Path to env definition file.\n   * @default './env.ts' (resolved from project root)\n   */\n  configFile?: string\n\n  /**\n   * Vite 8 environment names that are allowed to import virtual:env/server.\n   * Use this to allow edge runtimes (Cloudflare Workers → 'workerd', Deno Deploy → 'ssr').\n   * @default ['ssr']\n   */\n  serverEnvironments?: string[]\n\n  /**\n   * Behavior when virtual:env/server is imported from a disallowed environment.\n   *\n   * - 'warn'  — Deprecation warning printed to terminal + vite-env-warnings.log written.\n   *             Build succeeds but exits with code 1. Default in 0.x releases.\n   *             The default will change to 'error' in 1.0.0.\n   *\n   * - 'error' — Hard build error. No artifacts emitted.\n   *\n   * - 'stub'  — Returns a module that throws at runtime if the import executes.\n   *             Use for testing environments (Vitest jsdom) or framework isomorphic files\n   *             where the import exists but the code path is never reached in a server context.\n   *\n   * @default 'warn'\n   */\n  onClientAccessOfServerModule?: 'error' | 'stub' | 'warn'\n}\n\n/**\n * Validates environment variables against the definition.\n * Routes to Zod or Standard Schema path based on definition type.\n * Zod modules are loaded dynamically to avoid requiring zod for Standard Schema users.\n */\nasync function validateAndFormat(\n  def: AnyEnvDefinition,\n  rawEnv: Record<string, string>,\n): Promise<{ data: Record<string, unknown> } | { error: string }> {\n  if (isStandardEnvDefinition(def)) {\n    const result = await validateStandardEnv(def, rawEnv)\n    if (!result.success) {\n      return { error: formatStandardSchemaError(result.errors) }\n    }\n    return { data: result.data }\n  }\n\n  const { validateEnv } = await import('./schema')\n  const { formatZodError } = await import('./format')\n  const result = validateEnv(def, rawEnv)\n  if (!result.success) {\n    return { error: formatZodError(result.errors) }\n  }\n  return { data: result.data }\n}\n\nexport default function ViteEnv(options: ViteEnvOptions = {}): Plugin {\n  let resolvedConfig: ResolvedConfig\n  let envDefinition: AnyEnvDefinition\n  let lastValidated: Record<string, unknown> = {}\n  let serverModuleGuardFails: GuardFail[] = []\n  let didSetExitCode = false\n\n  const serverEnvs = options.serverEnvironments ?? ['ssr']\n  const guardMode = options.onClientAccessOfServerModule ?? 'warn'\n\n  return {\n    name: 'vite-env',\n    enforce: 'pre',\n\n    async configResolved(config) {\n      resolvedConfig = config\n\n      const configPath = path.resolve(\n        config.root,\n        options.configFile ?? 'env.ts',\n      )\n\n      try {\n        envDefinition = await loadEnvConfig(configPath)\n      }\n      catch (e) {\n        throw new Error(\n          `[vite-env] Could not load env definition file at: ${configPath}\\n`\n          + `  Create an env.ts file and export default defineEnv({ ... })`,\n          { cause: e },\n        )\n      }\n    },\n\n    async buildStart() {\n      serverModuleGuardFails = []\n      if (didSetExitCode) {\n        process.exitCode = 0\n        didSetExitCode = false\n      }\n\n      const rawEnv = await loadEnvSources(resolvedConfig)\n      const result = await validateAndFormat(envDefinition, rawEnv)\n\n      if ('error' in result) {\n        throw new Error(\n          `[vite-env] Environment validation failed:\\n\\n${result.error}`,\n        )\n      }\n\n      lastValidated = result.data\n\n      if (isStandardEnvDefinition(envDefinition)) {\n        await generateStandardDts(envDefinition, resolvedConfig.root)\n      }\n      else {\n        const { generateDts } = await import('./dts')\n        await generateDts(envDefinition, resolvedConfig.root)\n      }\n\n      const count = Object.keys(lastValidated).length\n      resolvedConfig.logger.info(\n        `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m ${count} variables validated`,\n      )\n    },\n\n    resolveId(this: Rollup.PluginContext, source, importer) {\n      if (source === 'virtual:env/client')\n        return '\\0virtual:env/client'\n      if (source === 'virtual:env/server') {\n        const envName = this.environment?.name ?? 'client'\n        const result = checkServerModuleAccess(envName, serverEnvs, guardMode, importer)\n        if (!result.allowed)\n          serverModuleGuardFails.push(result)\n        return '\\0virtual:env/server'\n      }\n    },\n\n    load(this: Rollup.PluginContext, id) {\n      if (id === '\\0virtual:env/client')\n        return buildClientModule(envDefinition, lastValidated)\n      if (id === '\\0virtual:env/server') {\n        const envName = this.environment?.name ?? 'client'\n        // Filter to fails from this environment only — other envs may have recorded fails for their own loads\n        const envFails = serverModuleGuardFails.filter(f => f.envName === envName)\n        if (envFails.length > 0) {\n          // warn once per load cycle using the last recorded fail; unique importers are written to the log file\n          const latest = envFails.at(-1)!\n          if (latest.mode === 'error')\n            throw new Error(formatHardError(latest))\n          if (latest.mode === 'stub')\n            return buildServerStubModule(envName)\n          resolvedConfig.logger.warn(`\\n${formatGuardWarning(latest)}`)\n        }\n        return buildServerModule(envDefinition, lastValidated)\n      }\n    },\n\n    async buildEnd(error) {\n      if (error)\n        return\n      if (serverModuleGuardFails.length === 0)\n        return\n      if (guardMode !== 'warn')\n        return\n      await writeWarningsLog(serverModuleGuardFails, resolvedConfig.root)\n      process.exitCode = 1\n      didSetExitCode = true\n    },\n\n    generateBundle(this: Rollup.PluginContext, _options, bundle) {\n      if (resolvedConfig.build.ssr)\n        return\n\n      const envName = this.environment?.name ?? 'client'\n      if (serverEnvs.includes(envName))\n        return\n\n      const leaks = detectServerLeak(\n        envDefinition,\n        lastValidated,\n        bundle as Record<string, { type: string, code?: string }>,\n        (keys) => {\n          resolvedConfig.logger.warn(\n            `  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Leak detection skipped ${keys.length} server variable(s) with values shorter than 8 chars: ${keys.join(', ')}`,\n          )\n        },\n      )\n\n      if (leaks.length > 0) {\n        const details = leaks.map(l => `  ✗ ${l.key} found in ${l.chunk}`).join('\\n')\n        throw new Error(\n          `[vite-env] Server environment variables detected in client bundle!\\n\\n${details}\\n\\n  These variables are marked as server-only and must never reach the browser.`,\n        )\n      }\n    },\n\n    configureServer(server) {\n      const envDir = resolvedConfig.envDir || resolvedConfig.root\n      server.watcher.add(path.join(envDir, '.env*'))\n\n      let debounceTimer: ReturnType<typeof setTimeout>\n\n      server.watcher.on('change', async (file) => {\n        if (!path.basename(file).startsWith('.env'))\n          return\n\n        clearTimeout(debounceTimer)\n        debounceTimer = setTimeout(async () => {\n          try {\n            const rawEnv = await loadEnvSources(resolvedConfig)\n            const result = await validateAndFormat(envDefinition, rawEnv)\n\n            if ('error' in result) {\n              resolvedConfig.logger.warn(\n                `\\n  \\x1B[33m⚠\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidation failed:\\n${result.error}`,\n              )\n              return\n            }\n\n            lastValidated = result.data\n\n            const clientMod = server.moduleGraph.getModuleById('\\0virtual:env/client')\n            const serverMod = server.moduleGraph.getModuleById('\\0virtual:env/server')\n            if (clientMod)\n              server.moduleGraph.invalidateModule(clientMod)\n            if (serverMod)\n              server.moduleGraph.invalidateModule(serverMod)\n            if (clientMod || serverMod) {\n              serverModuleGuardFails = []\n              server.hot.send({ type: 'full-reload' })\n              resolvedConfig.logger.info(\n                `  \\x1B[32m✓\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Env revalidated`,\n              )\n            }\n          }\n          catch (e) {\n            resolvedConfig.logger.error(\n              `\\n  \\x1B[31m✗\\x1B[0m \\x1B[36m[vite-env]\\x1B[0m Failed to reload env files: ${e instanceof Error ? e.message : String(e)}`,\n            )\n          }\n        }, 150)\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAcA,SAAgB,wBACd,SACA,oBACA,MACA,UACa;AACb,KAAI,mBAAmB,SAAS,QAAQ,CACtC,QAAO,EAAE,SAAS,MAAM;AAC1B,QAAO;EAAE,SAAS;EAAO;EAAM;EAAS;EAAU;;;;;;;AAQpD,SAAgB,sBAAsB,SAAqD;AACzF,QAAO;EACL,YAAY;EACZ,MAAM;;wDAE8C,QAAQ;;;sEAGM,QAAQ;;EAE3E;;;;AClCH,MAAM,aAAa;;;;;;;;;;AAWnB,eAAsB,iBAAiB,OAAoB,MAA6B;CACtF,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS;EACpC,MAAM,MAAM,GAAG,KAAK,QAAQ,IAAI,KAAK,YAAY;AACjD,MAAI,KAAK,IAAI,IAAI,CACf,QAAO;AACT,OAAK,IAAI,IAAI;AACb,SAAO;GACP;CACF,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;CAE1C,MAAM,UAAU,GAAG,WAAW,MADd,OAAO,KAAI,SAAQ,oBAAoB,MAAM,UAAU,CAAC,CAAC,KAAK,OAAO,CACzC;CAC5C,MAAM,WAAW,KAAK,KAAK,MAAM,wBAAwB;AACzD,KAAI;AACF,QAAM,GAAG,UAAU,UAAU,SAAS,QAAQ;UAEzC,GAAG;AACR,QAAM,IAAI,MACR,uDAAuD,KAAK,4BAC5D,EAAE,OAAO,GAAG,CACb;;;;;;;;;;;;;;;ACtBL,eAAsB,eACpB,QACiC;AAOjC,QAAO;EACL,GAPc,QACd,OAAO,MACP,OAAO,UAAU,OAAO,MACxB,GACD;EAIC,GAAG,cAAc,QAAQ,IAAI;EAC9B;;AAGH,SAAS,cAAc,KAAgD;AACrE,QAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,QACjB,UAAqC,OAAO,MAAM,OAAO,SAC3D,CACF;;;;ACjCH,SAAgB,kBACd,KACA,MACoC;CACpC,MAAM,aAAa,IAAI,IAAI,OAAO,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;CAEzD,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,OAAO,WAAW,IAAI,EAAE,CAAC,CACxD;AAED,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;;EAEpE;;AAGH,SAAgB,kBACd,MACA,MACoC;AACpC,QAAO;EACL,YAAY;EACZ,MAAM;mCACyB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAE9D;;;;;;;;;ACwBH,eAAe,kBACb,KACA,QACgE;AAChE,KAAI,wBAAwB,IAAI,EAAE;EAChC,MAAM,SAAS,MAAM,oBAAoB,KAAK,OAAO;AACrD,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,0BAA0B,OAAO,OAAO,EAAE;AAE5D,SAAO,EAAE,MAAM,OAAO,MAAM;;CAG9B,MAAM,EAAE,gBAAgB,MAAM,OAAO;CACrC,MAAM,EAAE,mBAAmB,MAAM,OAAO;CACxC,MAAM,SAAS,YAAY,KAAK,OAAO;AACvC,KAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,eAAe,OAAO,OAAO,EAAE;AAEjD,QAAO,EAAE,MAAM,OAAO,MAAM;;AAG9B,SAAwB,QAAQ,UAA0B,EAAE,EAAU;CACpE,IAAI;CACJ,IAAI;CACJ,IAAI,gBAAyC,EAAE;CAC/C,IAAI,yBAAsC,EAAE;CAC5C,IAAI,iBAAiB;CAErB,MAAM,aAAa,QAAQ,sBAAsB,CAAC,MAAM;CACxD,MAAM,YAAY,QAAQ,gCAAgC;AAE1D,QAAO;EACL,MAAM;EACN,SAAS;EAET,MAAM,eAAe,QAAQ;AAC3B,oBAAiB;GAEjB,MAAM,aAAa,KAAK,QACtB,OAAO,MACP,QAAQ,cAAc,SACvB;AAED,OAAI;AACF,oBAAgB,MAAM,cAAc,WAAW;YAE1C,GAAG;AACR,UAAM,IAAI,MACR,qDAAqD,WAAW,kEAEhE,EAAE,OAAO,GAAG,CACb;;;EAIL,MAAM,aAAa;AACjB,4BAAyB,EAAE;AAC3B,OAAI,gBAAgB;AAClB,YAAQ,WAAW;AACnB,qBAAiB;;GAGnB,MAAM,SAAS,MAAM,eAAe,eAAe;GACnD,MAAM,SAAS,MAAM,kBAAkB,eAAe,OAAO;AAE7D,OAAI,WAAW,OACb,OAAM,IAAI,MACR,gDAAgD,OAAO,QACxD;AAGH,mBAAgB,OAAO;AAEvB,OAAI,wBAAwB,cAAc,CACxC,OAAM,oBAAoB,eAAe,eAAe,KAAK;QAE1D;IACH,MAAM,EAAE,gBAAgB,MAAM,OAAO;AACrC,UAAM,YAAY,eAAe,eAAe,KAAK;;GAGvD,MAAM,QAAQ,OAAO,KAAK,cAAc,CAAC;AACzC,kBAAe,OAAO,KACpB,gDAAgD,MAAM,sBACvD;;EAGH,UAAsC,QAAQ,UAAU;AACtD,OAAI,WAAW,qBACb,QAAO;AACT,OAAI,WAAW,sBAAsB;IAEnC,MAAM,SAAS,wBADC,KAAK,aAAa,QAAQ,UACM,YAAY,WAAW,SAAS;AAChF,QAAI,CAAC,OAAO,QACV,wBAAuB,KAAK,OAAO;AACrC,WAAO;;;EAIX,KAAiC,IAAI;AACnC,OAAI,OAAO,uBACT,QAAO,kBAAkB,eAAe,cAAc;AACxD,OAAI,OAAO,wBAAwB;IACjC,MAAM,UAAU,KAAK,aAAa,QAAQ;IAE1C,MAAM,WAAW,uBAAuB,QAAO,MAAK,EAAE,YAAY,QAAQ;AAC1E,QAAI,SAAS,SAAS,GAAG;KAEvB,MAAM,SAAS,SAAS,GAAG,GAAG;AAC9B,SAAI,OAAO,SAAS,QAClB,OAAM,IAAI,MAAM,gBAAgB,OAAO,CAAC;AAC1C,SAAI,OAAO,SAAS,OAClB,QAAO,sBAAsB,QAAQ;AACvC,oBAAe,OAAO,KAAK,KAAK,mBAAmB,OAAO,GAAG;;AAE/D,WAAO,kBAAkB,eAAe,cAAc;;;EAI1D,MAAM,SAAS,OAAO;AACpB,OAAI,MACF;AACF,OAAI,uBAAuB,WAAW,EACpC;AACF,OAAI,cAAc,OAChB;AACF,SAAM,iBAAiB,wBAAwB,eAAe,KAAK;AACnE,WAAQ,WAAW;AACnB,oBAAiB;;EAGnB,eAA2C,UAAU,QAAQ;AAC3D,OAAI,eAAe,MAAM,IACvB;GAEF,MAAM,UAAU,KAAK,aAAa,QAAQ;AAC1C,OAAI,WAAW,SAAS,QAAQ,CAC9B;GAEF,MAAM,QAAQ,iBACZ,eACA,eACA,SACC,SAAS;AACR,mBAAe,OAAO,KACpB,uEAAuE,KAAK,OAAO,wDAAwD,KAAK,KAAK,KAAK,GAC3J;KAEJ;AAED,OAAI,MAAM,SAAS,GAAG;IACpB,MAAM,UAAU,MAAM,KAAI,MAAK,OAAO,EAAE,IAAI,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK;AAC7E,UAAM,IAAI,MACR,yEAAyE,QAAQ,mFAClF;;;EAIL,gBAAgB,QAAQ;GACtB,MAAM,SAAS,eAAe,UAAU,eAAe;AACvD,UAAO,QAAQ,IAAI,KAAK,KAAK,QAAQ,QAAQ,CAAC;GAE9C,IAAI;AAEJ,UAAO,QAAQ,GAAG,UAAU,OAAO,SAAS;AAC1C,QAAI,CAAC,KAAK,SAAS,KAAK,CAAC,WAAW,OAAO,CACzC;AAEF,iBAAa,cAAc;AAC3B,oBAAgB,WAAW,YAAY;AACrC,SAAI;MACF,MAAM,SAAS,MAAM,eAAe,eAAe;MACnD,MAAM,SAAS,MAAM,kBAAkB,eAAe,OAAO;AAE7D,UAAI,WAAW,QAAQ;AACrB,sBAAe,OAAO,KACpB,4EAA4E,OAAO,QACpF;AACD;;AAGF,sBAAgB,OAAO;MAEvB,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;MAC1E,MAAM,YAAY,OAAO,YAAY,cAAc,uBAAuB;AAC1E,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,UACF,QAAO,YAAY,iBAAiB,UAAU;AAChD,UAAI,aAAa,WAAW;AAC1B,gCAAyB,EAAE;AAC3B,cAAO,IAAI,KAAK,EAAE,MAAM,eAAe,CAAC;AACxC,sBAAe,OAAO,KACpB,+DACD;;cAGE,GAAG;AACR,qBAAe,OAAO,MACpB,8EAA8E,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GACzH;;OAEF,IAAI;KACP;;EAEL"}

package/dist/schema.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"schema.cjs","names":["z"],"sources":["../src/schema.ts"],"sourcesContent":["import type { EnvDefinition, EnvPreset, ValidationResult } from './types'\nimport { z } from 'zod'\n\ninterface DefineEnvInput extends EnvDefinition {\n  presets?: EnvPreset[]\n}\n\nfunction warnSideConflicts(\n  keys: string[],\n  seen: Set<string>,\n  userKeys: Set<string>,\n  side: 'server' | 'client',\n): void {\n  for (const key of keys) {\n    const duplicate = seen.has(key)\n    if (duplicate)\n      console.warn(`[vite-env] \"${key}\" is defined in multiple presets. The last preset wins.`)\n    seen.add(key)\n    if (!duplicate && userKeys.has(key))\n      console.warn(`[vite-env] \"${key}\" is defined in both a preset and your ${side} config. Your definition wins.`)\n  }\n}\n\nfunction warnConflicts(\n  presets: EnvPreset[],\n  userServerKeys: Set<string>,\n  userClientKeys: Set<string>,\n): void {\n  const seenServerKeys = new Set<string>()\n  const seenClientKeys = new Set<string>()\n\n  for (const preset of presets) {\n    warnSideConflicts(Object.keys(preset.server ?? {}), seenServerKeys, userServerKeys, 'server')\n    warnSideConflicts(Object.keys(preset.client ?? {}), seenClientKeys, userClientKeys, 'client')\n  }\n}\n\nexport function defineEnv<T extends DefineEnvInput>(definition: T): Omit<T, 'presets'> & Pick<EnvDefinition, 'server' | 'client'> {\n  const { presets = [], server, client, ...rest } = definition\n  // ...rest intentionally forwarded — T may carry extra keys beyond EnvDefinition\n\n  const mergedServer: z.ZodRawShape = Object.assign({}, ...presets.map(p => p.server ?? {}), server)\n  const mergedClient: z.ZodRawShape = Object.assign({}, ...presets.map(p => p.client ?? {}), client)\n\n  warnConflicts(\n    presets,\n    new Set(Object.keys(server ?? {})),\n    new Set(Object.keys(client ?? {})),\n  )\n\n  for (const key of Object.keys(mergedClient)) {\n    if (!key.startsWith('VITE_')) {\n      throw new Error(\n        `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n        + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n      )\n    }\n  }\n\n  const result: Record<string, unknown> = { ...rest }\n  if (Object.keys(mergedServer).length > 0 || server !== undefined)\n    result.server = mergedServer\n  if (Object.keys(mergedClient).length > 0 || client !== undefined)\n    result.client = mergedClient\n\n  return result as Omit<T, 'presets'>\n}\n\nexport function validateEnv(\n  def: EnvDefinition,\n  rawEnv: Record<string, string>,\n): ValidationResult {\n  const combinedShape = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const schema = z.object(combinedShape)\n  const result = schema.safeParse(rawEnv)\n\n  if (result.success) {\n    return { success: true, data: result.data, errors: [] as const }\n  }\n\n  return {\n    success: false,\n    data: null,\n    errors: result.error.issues,\n  }\n}\n"],"mappings":";;;;AAOA,SAAS,kBACP,MACA,MACA,UACA,MACM;AACN,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,MAAI,UACF,SAAQ,KAAK,eAAe,IAAI,yDAAyD;AAC3F,OAAK,IAAI,IAAI;AACb,MAAI,CAAC,aAAa,SAAS,IAAI,IAAI,CACjC,SAAQ,KAAK,eAAe,IAAI,yCAAyC,KAAK,gCAAgC;;;AAIpH,SAAS,cACP,SACA,gBACA,gBACM;CACN,MAAM,iCAAiB,IAAI,KAAa;CACxC,MAAM,iCAAiB,IAAI,KAAa;AAExC,MAAK,MAAM,UAAU,SAAS;AAC5B,oBAAkB,OAAO,KAAK,OAAO,UAAU,EAAE,CAAC,EAAE,gBAAgB,gBAAgB,SAAS;AAC7F,oBAAkB,OAAO,KAAK,OAAO,UAAU,EAAE,CAAC,EAAE,gBAAgB,gBAAgB,SAAS;;;AAIjG,SAAgB,UAAoC,YAA8E;CAChI,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,QAAQ,GAAG,SAAS;CAGlD,MAAM,eAA8B,OAAO,OAAO,EAAE,EAAE,GAAG,QAAQ,KAAI,MAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO;CAClG,MAAM,eAA8B,OAAO,OAAO,EAAE,EAAE,GAAG,QAAQ,KAAI,MAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO;AAElG,eACE,SACA,IAAI,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,EAClC,IAAI,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,CACnC;AAED,MAAK,MAAM,OAAO,OAAO,KAAK,aAAa,CACzC,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;CAIL,MAAM,SAAkC,EAAE,GAAG,MAAM;AACnD,KAAI,OAAO,KAAK,aAAa,CAAC,SAAS,KAAK,WAAW,KAAA,EACrD,QAAO,SAAS;AAClB,KAAI,OAAO,KAAK,aAAa,CAAC,SAAS,KAAK,WAAW,KAAA,EACrD,QAAO,SAAS;AAElB,QAAO;;AAGT,SAAgB,YACd,KACA,QACkB;CAClB,MAAM,gBAAgB;EACpB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAGD,MAAM,SADSA,IAAAA,EAAE,OAAO,cAAc,CAChB,UAAU,OAAO;AAEvC,KAAI,OAAO,QACT,QAAO;EAAE,SAAS;EAAM,MAAM,OAAO;EAAM,QAAQ,EAAE;EAAW;AAGlE,QAAO;EACL,SAAS;EACT,MAAM;EACN,QAAQ,OAAO,MAAM;EACtB"}
+{"version":3,"file":"schema.cjs","names":["z"],"sources":["../src/schema.ts"],"sourcesContent":["import type { EnvDefinition, EnvPreset, ValidationResult } from './types'\nimport { z } from 'zod'\n\ntype DefineEnvInput = {\n  presets?: EnvPreset[]\n} & EnvDefinition\n\nfunction warnSideConflicts(\n  keys: string[],\n  seen: Set<string>,\n  userKeys: Set<string>,\n  side: 'server' | 'client',\n): void {\n  for (const key of keys) {\n    const duplicate = seen.has(key)\n    if (duplicate)\n      console.warn(`[vite-env] \"${key}\" is defined in multiple presets. The last preset wins.`)\n    seen.add(key)\n    if (!duplicate && userKeys.has(key))\n      console.warn(`[vite-env] \"${key}\" is defined in both a preset and your ${side} config. Your definition wins.`)\n  }\n}\n\nfunction warnConflicts(\n  presets: EnvPreset[],\n  userServerKeys: Set<string>,\n  userClientKeys: Set<string>,\n): void {\n  const seenServerKeys = new Set<string>()\n  const seenClientKeys = new Set<string>()\n\n  for (const preset of presets) {\n    warnSideConflicts(Object.keys(preset.server ?? {}), seenServerKeys, userServerKeys, 'server')\n    warnSideConflicts(Object.keys(preset.client ?? {}), seenClientKeys, userClientKeys, 'client')\n  }\n}\n\nexport function defineEnv<T extends DefineEnvInput>(definition: T): Omit<T, 'presets'> & Pick<EnvDefinition, 'server' | 'client'> {\n  const { presets = [], server, client, ...rest } = definition\n  // ...rest intentionally forwarded — T may carry extra keys beyond EnvDefinition\n\n  const mergedServer: z.ZodRawShape = Object.assign({}, ...presets.map(p => p.server ?? {}), server)\n  const mergedClient: z.ZodRawShape = Object.assign({}, ...presets.map(p => p.client ?? {}), client)\n\n  warnConflicts(\n    presets,\n    new Set(Object.keys(server ?? {})),\n    new Set(Object.keys(client ?? {})),\n  )\n\n  for (const key of Object.keys(mergedClient)) {\n    if (!key.startsWith('VITE_')) {\n      throw new Error(\n        `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n        + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n      )\n    }\n  }\n\n  const result: Record<string, unknown> = { ...rest }\n  if (Object.keys(mergedServer).length > 0 || server !== undefined)\n    result.server = mergedServer\n  if (Object.keys(mergedClient).length > 0 || client !== undefined)\n    result.client = mergedClient\n\n  return result as Omit<T, 'presets'>\n}\n\nexport function validateEnv(\n  def: EnvDefinition,\n  rawEnv: Record<string, string>,\n): ValidationResult {\n  const combinedShape = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const schema = z.object(combinedShape)\n  const result = schema.safeParse(rawEnv)\n\n  if (result.success) {\n    return { success: true, data: result.data, errors: [] as const }\n  }\n\n  return {\n    success: false,\n    data: null,\n    errors: result.error.issues,\n  }\n}\n"],"mappings":";;;;AAOA,SAAS,kBACP,MACA,MACA,UACA,MACM;AACN,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,MAAI,UACF,SAAQ,KAAK,eAAe,IAAI,yDAAyD;AAC3F,OAAK,IAAI,IAAI;AACb,MAAI,CAAC,aAAa,SAAS,IAAI,IAAI,CACjC,SAAQ,KAAK,eAAe,IAAI,yCAAyC,KAAK,gCAAgC;;;AAIpH,SAAS,cACP,SACA,gBACA,gBACM;CACN,MAAM,iCAAiB,IAAI,KAAa;CACxC,MAAM,iCAAiB,IAAI,KAAa;AAExC,MAAK,MAAM,UAAU,SAAS;AAC5B,oBAAkB,OAAO,KAAK,OAAO,UAAU,EAAE,CAAC,EAAE,gBAAgB,gBAAgB,SAAS;AAC7F,oBAAkB,OAAO,KAAK,OAAO,UAAU,EAAE,CAAC,EAAE,gBAAgB,gBAAgB,SAAS;;;AAIjG,SAAgB,UAAoC,YAA8E;CAChI,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,QAAQ,GAAG,SAAS;CAGlD,MAAM,eAA8B,OAAO,OAAO,EAAE,EAAE,GAAG,QAAQ,KAAI,MAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO;CAClG,MAAM,eAA8B,OAAO,OAAO,EAAE,EAAE,GAAG,QAAQ,KAAI,MAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO;AAElG,eACE,SACA,IAAI,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,EAClC,IAAI,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,CACnC;AAED,MAAK,MAAM,OAAO,OAAO,KAAK,aAAa,CACzC,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;CAIL,MAAM,SAAkC,EAAE,GAAG,MAAM;AACnD,KAAI,OAAO,KAAK,aAAa,CAAC,SAAS,KAAK,WAAW,KAAA,EACrD,QAAO,SAAS;AAClB,KAAI,OAAO,KAAK,aAAa,CAAC,SAAS,KAAK,WAAW,KAAA,EACrD,QAAO,SAAS;AAElB,QAAO;;AAGT,SAAgB,YACd,KACA,QACkB;CAClB,MAAM,gBAAgB;EACpB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAGD,MAAM,SADSA,IAAAA,EAAE,OAAO,cAAc,CAChB,UAAU,OAAO;AAEvC,KAAI,OAAO,QACT,QAAO;EAAE,SAAS;EAAM,MAAM,OAAO;EAAM,QAAQ,EAAE;EAAW;AAGlE,QAAO;EACL,SAAS;EACT,MAAM;EACN,QAAQ,OAAO,MAAM;EACtB"}

package/dist/schema.d.cts

@@ -1,9 +1,9 @@
-import { l as ValidationResult, n as EnvDefinition, r as EnvPreset } from "./types-Bl3YdPck.cjs";
+import { l as ValidationResult, n as EnvDefinition, r as EnvPreset } from "./types-CpYkRwLM.cjs";
 
 //#region src/schema.d.ts
-interface DefineEnvInput extends EnvDefinition {
+type DefineEnvInput = {
   presets?: EnvPreset[];
-}
+} & EnvDefinition;
 declare function defineEnv<T extends DefineEnvInput>(definition: T): Omit<T, 'presets'> & Pick<EnvDefinition, 'server' | 'client'>;
 declare function validateEnv(def: EnvDefinition, rawEnv: Record<string, string>): ValidationResult;
 //#endregion

package/dist/schema.d.mts

@@ -1,9 +1,9 @@
-import { l as ValidationResult, n as EnvDefinition, r as EnvPreset } from "./types-CUF5RARc.mjs";
+import { l as ValidationResult, n as EnvDefinition, r as EnvPreset } from "./types--Km3TAdJ.mjs";
 
 //#region src/schema.d.ts
-interface DefineEnvInput extends EnvDefinition {
+type DefineEnvInput = {
   presets?: EnvPreset[];
-}
+} & EnvDefinition;
 declare function defineEnv<T extends DefineEnvInput>(definition: T): Omit<T, 'presets'> & Pick<EnvDefinition, 'server' | 'client'>;
 declare function validateEnv(def: EnvDefinition, rawEnv: Record<string, string>): ValidationResult;
 //#endregion

package/dist/schema.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"schema.mjs","names":[],"sources":["../src/schema.ts"],"sourcesContent":["import type { EnvDefinition, EnvPreset, ValidationResult } from './types'\nimport { z } from 'zod'\n\ninterface DefineEnvInput extends EnvDefinition {\n  presets?: EnvPreset[]\n}\n\nfunction warnSideConflicts(\n  keys: string[],\n  seen: Set<string>,\n  userKeys: Set<string>,\n  side: 'server' | 'client',\n): void {\n  for (const key of keys) {\n    const duplicate = seen.has(key)\n    if (duplicate)\n      console.warn(`[vite-env] \"${key}\" is defined in multiple presets. The last preset wins.`)\n    seen.add(key)\n    if (!duplicate && userKeys.has(key))\n      console.warn(`[vite-env] \"${key}\" is defined in both a preset and your ${side} config. Your definition wins.`)\n  }\n}\n\nfunction warnConflicts(\n  presets: EnvPreset[],\n  userServerKeys: Set<string>,\n  userClientKeys: Set<string>,\n): void {\n  const seenServerKeys = new Set<string>()\n  const seenClientKeys = new Set<string>()\n\n  for (const preset of presets) {\n    warnSideConflicts(Object.keys(preset.server ?? {}), seenServerKeys, userServerKeys, 'server')\n    warnSideConflicts(Object.keys(preset.client ?? {}), seenClientKeys, userClientKeys, 'client')\n  }\n}\n\nexport function defineEnv<T extends DefineEnvInput>(definition: T): Omit<T, 'presets'> & Pick<EnvDefinition, 'server' | 'client'> {\n  const { presets = [], server, client, ...rest } = definition\n  // ...rest intentionally forwarded — T may carry extra keys beyond EnvDefinition\n\n  const mergedServer: z.ZodRawShape = Object.assign({}, ...presets.map(p => p.server ?? {}), server)\n  const mergedClient: z.ZodRawShape = Object.assign({}, ...presets.map(p => p.client ?? {}), client)\n\n  warnConflicts(\n    presets,\n    new Set(Object.keys(server ?? {})),\n    new Set(Object.keys(client ?? {})),\n  )\n\n  for (const key of Object.keys(mergedClient)) {\n    if (!key.startsWith('VITE_')) {\n      throw new Error(\n        `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n        + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n      )\n    }\n  }\n\n  const result: Record<string, unknown> = { ...rest }\n  if (Object.keys(mergedServer).length > 0 || server !== undefined)\n    result.server = mergedServer\n  if (Object.keys(mergedClient).length > 0 || client !== undefined)\n    result.client = mergedClient\n\n  return result as Omit<T, 'presets'>\n}\n\nexport function validateEnv(\n  def: EnvDefinition,\n  rawEnv: Record<string, string>,\n): ValidationResult {\n  const combinedShape = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const schema = z.object(combinedShape)\n  const result = schema.safeParse(rawEnv)\n\n  if (result.success) {\n    return { success: true, data: result.data, errors: [] as const }\n  }\n\n  return {\n    success: false,\n    data: null,\n    errors: result.error.issues,\n  }\n}\n"],"mappings":";;AAOA,SAAS,kBACP,MACA,MACA,UACA,MACM;AACN,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,MAAI,UACF,SAAQ,KAAK,eAAe,IAAI,yDAAyD;AAC3F,OAAK,IAAI,IAAI;AACb,MAAI,CAAC,aAAa,SAAS,IAAI,IAAI,CACjC,SAAQ,KAAK,eAAe,IAAI,yCAAyC,KAAK,gCAAgC;;;AAIpH,SAAS,cACP,SACA,gBACA,gBACM;CACN,MAAM,iCAAiB,IAAI,KAAa;CACxC,MAAM,iCAAiB,IAAI,KAAa;AAExC,MAAK,MAAM,UAAU,SAAS;AAC5B,oBAAkB,OAAO,KAAK,OAAO,UAAU,EAAE,CAAC,EAAE,gBAAgB,gBAAgB,SAAS;AAC7F,oBAAkB,OAAO,KAAK,OAAO,UAAU,EAAE,CAAC,EAAE,gBAAgB,gBAAgB,SAAS;;;AAIjG,SAAgB,UAAoC,YAA8E;CAChI,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,QAAQ,GAAG,SAAS;CAGlD,MAAM,eAA8B,OAAO,OAAO,EAAE,EAAE,GAAG,QAAQ,KAAI,MAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO;CAClG,MAAM,eAA8B,OAAO,OAAO,EAAE,EAAE,GAAG,QAAQ,KAAI,MAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO;AAElG,eACE,SACA,IAAI,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,EAClC,IAAI,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,CACnC;AAED,MAAK,MAAM,OAAO,OAAO,KAAK,aAAa,CACzC,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;CAIL,MAAM,SAAkC,EAAE,GAAG,MAAM;AACnD,KAAI,OAAO,KAAK,aAAa,CAAC,SAAS,KAAK,WAAW,KAAA,EACrD,QAAO,SAAS;AAClB,KAAI,OAAO,KAAK,aAAa,CAAC,SAAS,KAAK,WAAW,KAAA,EACrD,QAAO,SAAS;AAElB,QAAO;;AAGT,SAAgB,YACd,KACA,QACkB;CAClB,MAAM,gBAAgB;EACpB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAGD,MAAM,SADS,EAAE,OAAO,cAAc,CAChB,UAAU,OAAO;AAEvC,KAAI,OAAO,QACT,QAAO;EAAE,SAAS;EAAM,MAAM,OAAO;EAAM,QAAQ,EAAE;EAAW;AAGlE,QAAO;EACL,SAAS;EACT,MAAM;EACN,QAAQ,OAAO,MAAM;EACtB"}
+{"version":3,"file":"schema.mjs","names":[],"sources":["../src/schema.ts"],"sourcesContent":["import type { EnvDefinition, EnvPreset, ValidationResult } from './types'\nimport { z } from 'zod'\n\ntype DefineEnvInput = {\n  presets?: EnvPreset[]\n} & EnvDefinition\n\nfunction warnSideConflicts(\n  keys: string[],\n  seen: Set<string>,\n  userKeys: Set<string>,\n  side: 'server' | 'client',\n): void {\n  for (const key of keys) {\n    const duplicate = seen.has(key)\n    if (duplicate)\n      console.warn(`[vite-env] \"${key}\" is defined in multiple presets. The last preset wins.`)\n    seen.add(key)\n    if (!duplicate && userKeys.has(key))\n      console.warn(`[vite-env] \"${key}\" is defined in both a preset and your ${side} config. Your definition wins.`)\n  }\n}\n\nfunction warnConflicts(\n  presets: EnvPreset[],\n  userServerKeys: Set<string>,\n  userClientKeys: Set<string>,\n): void {\n  const seenServerKeys = new Set<string>()\n  const seenClientKeys = new Set<string>()\n\n  for (const preset of presets) {\n    warnSideConflicts(Object.keys(preset.server ?? {}), seenServerKeys, userServerKeys, 'server')\n    warnSideConflicts(Object.keys(preset.client ?? {}), seenClientKeys, userClientKeys, 'client')\n  }\n}\n\nexport function defineEnv<T extends DefineEnvInput>(definition: T): Omit<T, 'presets'> & Pick<EnvDefinition, 'server' | 'client'> {\n  const { presets = [], server, client, ...rest } = definition\n  // ...rest intentionally forwarded — T may carry extra keys beyond EnvDefinition\n\n  const mergedServer: z.ZodRawShape = Object.assign({}, ...presets.map(p => p.server ?? {}), server)\n  const mergedClient: z.ZodRawShape = Object.assign({}, ...presets.map(p => p.client ?? {}), client)\n\n  warnConflicts(\n    presets,\n    new Set(Object.keys(server ?? {})),\n    new Set(Object.keys(client ?? {})),\n  )\n\n  for (const key of Object.keys(mergedClient)) {\n    if (!key.startsWith('VITE_')) {\n      throw new Error(\n        `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n        + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n      )\n    }\n  }\n\n  const result: Record<string, unknown> = { ...rest }\n  if (Object.keys(mergedServer).length > 0 || server !== undefined)\n    result.server = mergedServer\n  if (Object.keys(mergedClient).length > 0 || client !== undefined)\n    result.client = mergedClient\n\n  return result as Omit<T, 'presets'>\n}\n\nexport function validateEnv(\n  def: EnvDefinition,\n  rawEnv: Record<string, string>,\n): ValidationResult {\n  const combinedShape = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const schema = z.object(combinedShape)\n  const result = schema.safeParse(rawEnv)\n\n  if (result.success) {\n    return { success: true, data: result.data, errors: [] as const }\n  }\n\n  return {\n    success: false,\n    data: null,\n    errors: result.error.issues,\n  }\n}\n"],"mappings":";;AAOA,SAAS,kBACP,MACA,MACA,UACA,MACM;AACN,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,MAAI,UACF,SAAQ,KAAK,eAAe,IAAI,yDAAyD;AAC3F,OAAK,IAAI,IAAI;AACb,MAAI,CAAC,aAAa,SAAS,IAAI,IAAI,CACjC,SAAQ,KAAK,eAAe,IAAI,yCAAyC,KAAK,gCAAgC;;;AAIpH,SAAS,cACP,SACA,gBACA,gBACM;CACN,MAAM,iCAAiB,IAAI,KAAa;CACxC,MAAM,iCAAiB,IAAI,KAAa;AAExC,MAAK,MAAM,UAAU,SAAS;AAC5B,oBAAkB,OAAO,KAAK,OAAO,UAAU,EAAE,CAAC,EAAE,gBAAgB,gBAAgB,SAAS;AAC7F,oBAAkB,OAAO,KAAK,OAAO,UAAU,EAAE,CAAC,EAAE,gBAAgB,gBAAgB,SAAS;;;AAIjG,SAAgB,UAAoC,YAA8E;CAChI,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,QAAQ,GAAG,SAAS;CAGlD,MAAM,eAA8B,OAAO,OAAO,EAAE,EAAE,GAAG,QAAQ,KAAI,MAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO;CAClG,MAAM,eAA8B,OAAO,OAAO,EAAE,EAAE,GAAG,QAAQ,KAAI,MAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO;AAElG,eACE,SACA,IAAI,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,EAClC,IAAI,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,CACnC;AAED,MAAK,MAAM,OAAO,OAAO,KAAK,aAAa,CACzC,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;CAIL,MAAM,SAAkC,EAAE,GAAG,MAAM;AACnD,KAAI,OAAO,KAAK,aAAa,CAAC,SAAS,KAAK,WAAW,KAAA,EACrD,QAAO,SAAS;AAClB,KAAI,OAAO,KAAK,aAAa,CAAC,SAAS,KAAK,WAAW,KAAA,EACrD,QAAO,SAAS;AAElB,QAAO;;AAGT,SAAgB,YACd,KACA,QACkB;CAClB,MAAM,gBAAgB;EACpB,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAGD,MAAM,SADS,EAAE,OAAO,cAAc,CAChB,UAAU,OAAO;AAEvC,KAAI,OAAO,QACT,QAAO;EAAE,SAAS;EAAM,MAAM,OAAO;EAAM,QAAQ,EAAE;EAAW;AAGlE,QAAO;EACL,SAAS;EACT,MAAM;EACN,QAAQ,OAAO,MAAM;EACtB"}

package/dist/standard.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"standard.cjs","names":[],"sources":["../src/standard.ts"],"sourcesContent":["import type { StandardSchemaV1 } from '@standard-schema/spec'\nimport type { StandardEnvDefinition, StandardValidationIssue, StandardValidationResult } from './types'\n\nexport function defineStandardEnv<T extends Omit<StandardEnvDefinition, '_standard'>>(\n  definition: T,\n): T & { readonly _standard: true } {\n  if (definition.client) {\n    for (const key of Object.keys(definition.client)) {\n      if (!key.startsWith('VITE_')) {\n        throw new Error(\n          `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n          + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n        )\n      }\n    }\n  }\n\n  return { ...definition, _standard: true as const }\n}\n\nexport function isStandardEnvDefinition(\n  def: unknown,\n): def is StandardEnvDefinition {\n  return def != null && typeof def === 'object' && '_standard' in def && (def as any)._standard === true\n}\n\nexport async function validateStandardEnv(\n  def: StandardEnvDefinition,\n  rawEnv: Record<string, string>,\n): Promise<StandardValidationResult> {\n  const combinedShape: Record<string, StandardSchemaV1> = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const errors: StandardValidationIssue[] = []\n  const data: Record<string, unknown> = {}\n\n  for (const [key, schema] of Object.entries(combinedShape)) {\n    const result = await schema['~standard'].validate(rawEnv[key])\n\n    if ('issues' in result && result.issues) {\n      for (const issue of result.issues) {\n        errors.push({\n          message: issue.message,\n          path: [key, ...(issue.path ?? [])],\n        })\n      }\n    }\n    else {\n      data[key] = (result as { value: unknown }).value\n    }\n  }\n\n  if (errors.length > 0) {\n    return { success: false, data: null, errors }\n  }\n\n  return { success: true, data, errors: [] as const }\n}\n"],"mappings":";;AAGA,SAAgB,kBACd,YACkC;AAClC,KAAI,WAAW;OACR,MAAM,OAAO,OAAO,KAAK,WAAW,OAAO,CAC9C,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;;AAKP,QAAO;EAAE,GAAG;EAAY,WAAW;EAAe;;AAGpD,SAAgB,wBACd,KAC8B;AAC9B,QAAO,OAAO,QAAQ,OAAO,QAAQ,YAAY,eAAe,OAAQ,IAAY,cAAc;;AAGpG,eAAsB,oBACpB,KACA,QACmC;CACnC,MAAM,gBAAkD;EACtD,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAED,MAAM,SAAoC,EAAE;CAC5C,MAAM,OAAgC,EAAE;AAExC,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,EAAE;EACzD,MAAM,SAAS,MAAM,OAAO,aAAa,SAAS,OAAO,KAAK;AAE9D,MAAI,YAAY,UAAU,OAAO,OAC/B,MAAK,MAAM,SAAS,OAAO,OACzB,QAAO,KAAK;GACV,SAAS,MAAM;GACf,MAAM,CAAC,KAAK,GAAI,MAAM,QAAQ,EAAE,CAAE;GACnC,CAAC;MAIJ,MAAK,OAAQ,OAA8B;;AAI/C,KAAI,OAAO,SAAS,EAClB,QAAO;EAAE,SAAS;EAAO,MAAM;EAAM;EAAQ;AAG/C,QAAO;EAAE,SAAS;EAAM;EAAM,QAAQ,EAAE;EAAW"}
+{"version":3,"file":"standard.cjs","names":[],"sources":["../src/standard.ts"],"sourcesContent":["import type { StandardSchemaV1 } from '@standard-schema/spec'\nimport type { StandardEnvDefinition, StandardValidationIssue, StandardValidationResult } from './types'\n\nexport function defineStandardEnv<T extends Omit<StandardEnvDefinition, '_standard'>>(\n  definition: T,\n): T & { readonly _standard: true } {\n  if (definition.client) {\n    for (const key of Object.keys(definition.client)) {\n      if (!key.startsWith('VITE_')) {\n        throw new Error(\n          `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n          + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n        )\n      }\n    }\n  }\n\n  return { ...definition, _standard: true as const }\n}\n\nexport function isStandardEnvDefinition(\n  def: unknown,\n): def is StandardEnvDefinition {\n  return def != null && typeof def === 'object' && '_standard' in def && (def as Record<string, unknown>)._standard === true\n}\n\nexport async function validateStandardEnv(\n  def: StandardEnvDefinition,\n  rawEnv: Record<string, string>,\n): Promise<StandardValidationResult> {\n  const combinedShape: Record<string, StandardSchemaV1> = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const errors: StandardValidationIssue[] = []\n  const data: Record<string, unknown> = {}\n\n  for (const [key, schema] of Object.entries(combinedShape)) {\n    const result = await schema['~standard'].validate(rawEnv[key])\n\n    if ('issues' in result && result.issues) {\n      for (const issue of result.issues) {\n        errors.push({\n          message: issue.message,\n          path: [key, ...(issue.path ?? [])],\n        })\n      }\n    }\n    else {\n      data[key] = (result as { value: unknown }).value\n    }\n  }\n\n  if (errors.length > 0) {\n    return { success: false, data: null, errors }\n  }\n\n  return { success: true, data, errors: [] as const }\n}\n"],"mappings":";;AAGA,SAAgB,kBACd,YACkC;AAClC,KAAI,WAAW;OACR,MAAM,OAAO,OAAO,KAAK,WAAW,OAAO,CAC9C,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;;AAKP,QAAO;EAAE,GAAG;EAAY,WAAW;EAAe;;AAGpD,SAAgB,wBACd,KAC8B;AAC9B,QAAO,OAAO,QAAQ,OAAO,QAAQ,YAAY,eAAe,OAAQ,IAAgC,cAAc;;AAGxH,eAAsB,oBACpB,KACA,QACmC;CACnC,MAAM,gBAAkD;EACtD,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAED,MAAM,SAAoC,EAAE;CAC5C,MAAM,OAAgC,EAAE;AAExC,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,EAAE;EACzD,MAAM,SAAS,MAAM,OAAO,aAAa,SAAS,OAAO,KAAK;AAE9D,MAAI,YAAY,UAAU,OAAO,OAC/B,MAAK,MAAM,SAAS,OAAO,OACzB,QAAO,KAAK;GACV,SAAS,MAAM;GACf,MAAM,CAAC,KAAK,GAAI,MAAM,QAAQ,EAAE,CAAE;GACnC,CAAC;MAIJ,MAAK,OAAQ,OAA8B;;AAI/C,KAAI,OAAO,SAAS,EAClB,QAAO;EAAE,SAAS;EAAO,MAAM;EAAM;EAAQ;AAG/C,QAAO;EAAE,SAAS;EAAM;EAAM,QAAQ,EAAE;EAAW"}

package/dist/standard.d.cts

@@ -1,4 +1,4 @@
-import { c as StandardValidationResult, o as StandardEnvDefinition } from "./types-Bl3YdPck.cjs";
+import { c as StandardValidationResult, o as StandardEnvDefinition } from "./types-CpYkRwLM.cjs";
 
 //#region src/standard.d.ts
 declare function defineStandardEnv<T extends Omit<StandardEnvDefinition, '_standard'>>(definition: T): T & {

package/dist/standard.d.mts

@@ -1,4 +1,4 @@
-import { c as StandardValidationResult, o as StandardEnvDefinition } from "./types-CUF5RARc.mjs";
+import { c as StandardValidationResult, o as StandardEnvDefinition } from "./types--Km3TAdJ.mjs";
 
 //#region src/standard.d.ts
 declare function defineStandardEnv<T extends Omit<StandardEnvDefinition, '_standard'>>(definition: T): T & {

package/dist/standard.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"standard.mjs","names":[],"sources":["../src/standard.ts"],"sourcesContent":["import type { StandardSchemaV1 } from '@standard-schema/spec'\nimport type { StandardEnvDefinition, StandardValidationIssue, StandardValidationResult } from './types'\n\nexport function defineStandardEnv<T extends Omit<StandardEnvDefinition, '_standard'>>(\n  definition: T,\n): T & { readonly _standard: true } {\n  if (definition.client) {\n    for (const key of Object.keys(definition.client)) {\n      if (!key.startsWith('VITE_')) {\n        throw new Error(\n          `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n          + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n        )\n      }\n    }\n  }\n\n  return { ...definition, _standard: true as const }\n}\n\nexport function isStandardEnvDefinition(\n  def: unknown,\n): def is StandardEnvDefinition {\n  return def != null && typeof def === 'object' && '_standard' in def && (def as any)._standard === true\n}\n\nexport async function validateStandardEnv(\n  def: StandardEnvDefinition,\n  rawEnv: Record<string, string>,\n): Promise<StandardValidationResult> {\n  const combinedShape: Record<string, StandardSchemaV1> = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const errors: StandardValidationIssue[] = []\n  const data: Record<string, unknown> = {}\n\n  for (const [key, schema] of Object.entries(combinedShape)) {\n    const result = await schema['~standard'].validate(rawEnv[key])\n\n    if ('issues' in result && result.issues) {\n      for (const issue of result.issues) {\n        errors.push({\n          message: issue.message,\n          path: [key, ...(issue.path ?? [])],\n        })\n      }\n    }\n    else {\n      data[key] = (result as { value: unknown }).value\n    }\n  }\n\n  if (errors.length > 0) {\n    return { success: false, data: null, errors }\n  }\n\n  return { success: true, data, errors: [] as const }\n}\n"],"mappings":";AAGA,SAAgB,kBACd,YACkC;AAClC,KAAI,WAAW;OACR,MAAM,OAAO,OAAO,KAAK,WAAW,OAAO,CAC9C,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;;AAKP,QAAO;EAAE,GAAG;EAAY,WAAW;EAAe;;AAGpD,SAAgB,wBACd,KAC8B;AAC9B,QAAO,OAAO,QAAQ,OAAO,QAAQ,YAAY,eAAe,OAAQ,IAAY,cAAc;;AAGpG,eAAsB,oBACpB,KACA,QACmC;CACnC,MAAM,gBAAkD;EACtD,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAED,MAAM,SAAoC,EAAE;CAC5C,MAAM,OAAgC,EAAE;AAExC,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,EAAE;EACzD,MAAM,SAAS,MAAM,OAAO,aAAa,SAAS,OAAO,KAAK;AAE9D,MAAI,YAAY,UAAU,OAAO,OAC/B,MAAK,MAAM,SAAS,OAAO,OACzB,QAAO,KAAK;GACV,SAAS,MAAM;GACf,MAAM,CAAC,KAAK,GAAI,MAAM,QAAQ,EAAE,CAAE;GACnC,CAAC;MAIJ,MAAK,OAAQ,OAA8B;;AAI/C,KAAI,OAAO,SAAS,EAClB,QAAO;EAAE,SAAS;EAAO,MAAM;EAAM;EAAQ;AAG/C,QAAO;EAAE,SAAS;EAAM;EAAM,QAAQ,EAAE;EAAW"}
+{"version":3,"file":"standard.mjs","names":[],"sources":["../src/standard.ts"],"sourcesContent":["import type { StandardSchemaV1 } from '@standard-schema/spec'\nimport type { StandardEnvDefinition, StandardValidationIssue, StandardValidationResult } from './types'\n\nexport function defineStandardEnv<T extends Omit<StandardEnvDefinition, '_standard'>>(\n  definition: T,\n): T & { readonly _standard: true } {\n  if (definition.client) {\n    for (const key of Object.keys(definition.client)) {\n      if (!key.startsWith('VITE_')) {\n        throw new Error(\n          `[vite-env] Client env var \"${key}\" must be prefixed with VITE_.\\n`\n          + `  Rename it to \"VITE_${key}\" or move it to \"server\" if it's secret.`,\n        )\n      }\n    }\n  }\n\n  return { ...definition, _standard: true as const }\n}\n\nexport function isStandardEnvDefinition(\n  def: unknown,\n): def is StandardEnvDefinition {\n  return def != null && typeof def === 'object' && '_standard' in def && (def as Record<string, unknown>)._standard === true\n}\n\nexport async function validateStandardEnv(\n  def: StandardEnvDefinition,\n  rawEnv: Record<string, string>,\n): Promise<StandardValidationResult> {\n  const combinedShape: Record<string, StandardSchemaV1> = {\n    ...def.server,\n    ...def.client,\n  }\n\n  const errors: StandardValidationIssue[] = []\n  const data: Record<string, unknown> = {}\n\n  for (const [key, schema] of Object.entries(combinedShape)) {\n    const result = await schema['~standard'].validate(rawEnv[key])\n\n    if ('issues' in result && result.issues) {\n      for (const issue of result.issues) {\n        errors.push({\n          message: issue.message,\n          path: [key, ...(issue.path ?? [])],\n        })\n      }\n    }\n    else {\n      data[key] = (result as { value: unknown }).value\n    }\n  }\n\n  if (errors.length > 0) {\n    return { success: false, data: null, errors }\n  }\n\n  return { success: true, data, errors: [] as const }\n}\n"],"mappings":";AAGA,SAAgB,kBACd,YACkC;AAClC,KAAI,WAAW;OACR,MAAM,OAAO,OAAO,KAAK,WAAW,OAAO,CAC9C,KAAI,CAAC,IAAI,WAAW,QAAQ,CAC1B,OAAM,IAAI,MACR,8BAA8B,IAAI,uDACR,IAAI,0CAC/B;;AAKP,QAAO;EAAE,GAAG;EAAY,WAAW;EAAe;;AAGpD,SAAgB,wBACd,KAC8B;AAC9B,QAAO,OAAO,QAAQ,OAAO,QAAQ,YAAY,eAAe,OAAQ,IAAgC,cAAc;;AAGxH,eAAsB,oBACpB,KACA,QACmC;CACnC,MAAM,gBAAkD;EACtD,GAAG,IAAI;EACP,GAAG,IAAI;EACR;CAED,MAAM,SAAoC,EAAE;CAC5C,MAAM,OAAgC,EAAE;AAExC,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,EAAE;EACzD,MAAM,SAAS,MAAM,OAAO,aAAa,SAAS,OAAO,KAAK;AAE9D,MAAI,YAAY,UAAU,OAAO,OAC/B,MAAK,MAAM,SAAS,OAAO,OACzB,QAAO,KAAK;GACV,SAAS,MAAM;GACf,MAAM,CAAC,KAAK,GAAI,MAAM,QAAQ,EAAE,CAAE;GACnC,CAAC;MAIJ,MAAK,OAAQ,OAA8B;;AAI/C,KAAI,OAAO,SAAS,EAClB,QAAO;EAAE,SAAS;EAAO,MAAM;EAAM;EAAQ;AAG/C,QAAO;EAAE,SAAS;EAAM;EAAM,QAAQ,EAAE;EAAW"}

package/dist/{types-Bl3YdPck.d.cts → types--Km3TAdJ.d.mts}

@@ -1,21 +1,20 @@
-import { StandardSchemaV1 } from "@standard-schema/spec";
 import { z } from "zod";
+import { StandardSchemaV1 } from "@standard-schema/spec";
 
 //#region src/types.d.ts
-interface EnvDefinition {
+type EnvDefinition = {
   server?: z.ZodRawShape;
   client?: z.ZodRawShape;
-}
-interface StandardEnvDefinition {
+};
+type StandardEnvDefinition = {
   server?: Record<string, StandardSchemaV1>;
-  client?: Record<string, StandardSchemaV1>;
-  /** @internal */
+  client?: Record<string, StandardSchemaV1>; /** @internal */
   readonly _standard: true;
-}
-interface EnvPreset {
+};
+type EnvPreset = {
   server?: z.ZodRawShape;
   client?: z.ZodRawShape;
-}
+};
 type AnyEnvDefinition = EnvDefinition | StandardEnvDefinition;
 type ValidationResult = {
   success: true;
@@ -26,10 +25,10 @@ type ValidationResult = {
   data: null;
   errors: z.core.$ZodIssue[];
 };
-interface StandardValidationIssue {
+type StandardValidationIssue = {
   message: string;
-  path: ReadonlyArray<PropertyKey | StandardSchemaV1.PathSegment>;
-}
+  path: readonly (PropertyKey | StandardSchemaV1.PathSegment)[];
+};
 type StandardValidationResult = {
   success: true;
   data: Record<string, unknown>;
@@ -44,4 +43,4 @@ type InferClientEnv<T extends EnvDefinition> = z.infer<z.ZodObject<OrEmptyShape<
 type InferServerEnv<T extends EnvDefinition> = z.infer<z.ZodObject<OrEmptyShape<T['server']> & OrEmptyShape<T['client']>>>;
 //#endregion
 export { InferServerEnv as a, StandardValidationResult as c, InferClientEnv as i, ValidationResult as l, EnvDefinition as n, StandardEnvDefinition as o, EnvPreset as r, StandardValidationIssue as s, AnyEnvDefinition as t };
-//# sourceMappingURL=types-Bl3YdPck.d.cts.map
+//# sourceMappingURL=types--Km3TAdJ.d.mts.map

package/dist/{types-CUF5RARc.d.mts → types-CpYkRwLM.d.cts}

@@ -1,21 +1,20 @@
-import { z } from "zod";
 import { StandardSchemaV1 } from "@standard-schema/spec";
+import { z } from "zod";
 
 //#region src/types.d.ts
-interface EnvDefinition {
+type EnvDefinition = {
   server?: z.ZodRawShape;
   client?: z.ZodRawShape;
-}
-interface StandardEnvDefinition {
+};
+type StandardEnvDefinition = {
   server?: Record<string, StandardSchemaV1>;
-  client?: Record<string, StandardSchemaV1>;
-  /** @internal */
+  client?: Record<string, StandardSchemaV1>; /** @internal */
   readonly _standard: true;
-}
-interface EnvPreset {
+};
+type EnvPreset = {
   server?: z.ZodRawShape;
   client?: z.ZodRawShape;
-}
+};
 type AnyEnvDefinition = EnvDefinition | StandardEnvDefinition;
 type ValidationResult = {
   success: true;
@@ -26,10 +25,10 @@ type ValidationResult = {
   data: null;
   errors: z.core.$ZodIssue[];
 };
-interface StandardValidationIssue {
+type StandardValidationIssue = {
   message: string;
-  path: ReadonlyArray<PropertyKey | StandardSchemaV1.PathSegment>;
-}
+  path: readonly (PropertyKey | StandardSchemaV1.PathSegment)[];
+};
 type StandardValidationResult = {
   success: true;
   data: Record<string, unknown>;
@@ -44,4 +43,4 @@ type InferClientEnv<T extends EnvDefinition> = z.infer<z.ZodObject<OrEmptyShape<
 type InferServerEnv<T extends EnvDefinition> = z.infer<z.ZodObject<OrEmptyShape<T['server']> & OrEmptyShape<T['client']>>>;
 //#endregion
 export { InferServerEnv as a, StandardValidationResult as c, InferClientEnv as i, ValidationResult as l, EnvDefinition as n, StandardEnvDefinition as o, EnvPreset as r, StandardValidationIssue as s, AnyEnvDefinition as t };
-//# sourceMappingURL=types-CUF5RARc.d.mts.map
+//# sourceMappingURL=types-CpYkRwLM.d.cts.map

package/package.json

@@ -2,7 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/vitejs/vite-plugin-registry/refs/heads/main/data/schema/extended-package-json.schema.json",
   "name": "@vite-env/core",
   "type": "module",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "The env.ts layer for Vite — define once, validate everywhere, import with types",
   "license": "MIT",
   "homepage": "https://github.com/pyyupsk/vite-env#readme",
@@ -144,7 +144,7 @@
     "@vitest/coverage-v8": "^4.1.2",
     "tsdown": "^0.21.7",
     "typescript": "^6.0.2",
-    "vite": "^8.0.3",
+    "vite": "^8.0.8",
     "vitest": "^4.1.2",
     "zod": "^4.3.6"
   },