configproof 0.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ConfigTrace contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,217 @@
+# ConfigTrace
+
+[![npm version](https://img.shields.io/npm/v/configproof.svg)](https://www.npmjs.com/package/configproof)
+[![license](https://img.shields.io/npm/l/configproof.svg)](LICENSE)
+[![Node.js validation](https://github.com/sonusharma26/configtrace/actions/workflows/validate.yml/badge.svg)](https://github.com/sonusharma26/configtrace/actions/workflows/validate.yml)
+
+Understand where your Node.js configuration came from, where it was read, and why two runs behaved differently—without printing the underlying values.
+
+ConfigTrace is a local-first debugging tool for environment-based configuration. It records evidence for only the keys you select, then lets you explain a key, compare runs, diagnose differences, verify configuration rules, and create an offline report.
+
+## Why ConfigTrace?
+
+Configuration bugs often look like application bugs:
+
+- The same build works locally but fails in another environment.
+- A `.env` file loads, but the application reads an older value.
+- A required variable exists at startup and changes later.
+- A Worker or child process sees different configuration.
+- Two deployments appear identical, but read different settings.
+
+ConfigTrace helps answer:
+
+- Was this key present when the application started?
+- Was it loaded from a supported environment file?
+- Where did the application read it?
+- Did it change during the run?
+- What differs between a failing run and a working run?
+
+## Features
+
+- **Focused tracing** — watch specific keys or patterns instead of dumping the environment.
+- **Safe evidence** — captured artifacts and reports do not contain the selected raw values.
+- **Source clues** — observe supported `dotenv` and Node.js environment-file loading.
+- **Run comparison** — compare failing and working runs without exposing their values.
+- **Guided diagnosis** — rank relevant configuration differences with supporting evidence.
+- **Configuration checks** — verify required, forbidden, immutable, and source-related rules in CI.
+- **Offline reports** — generate a self-contained HTML report with no hosted service or telemetry.
+- **Process coverage** — optionally trace supported Node.js Workers and direct child processes.
+- **Library and agent access** — use the JavaScript API or expose reviewed traces through a read-only MCP server.
+
+## Requirements
+
+- Node.js `22.14+` within the 22.x line, or Node.js 24.x
+- A direct CommonJS or ESM Node.js entry point
+
+ConfigTrace launches Node directly. If your application normally starts with `npm start`, use the underlying command, such as `node server.js`, after `--`.
+
+## Installation
+
+Install ConfigTrace as a development dependency:
+
+```sh
+npm install --save-dev configproof
+```
+
+Run it with `npx configtrace`. You can also install it globally with `npm install --global configproof` and use `configtrace` directly.
+
+## Quick start
+
+Capture how your application uses selected configuration keys:
+
+```sh
+npx configtrace run --watch DATABASE_URL,API_URL --out .configtrace/run.ct.json -- node app.js
+```
+
+Explain one key:
+
+```sh
+npx configtrace explain DATABASE_URL --from .configtrace/run.ct.json
+```
+
+Create an offline report:
+
+```sh
+npx configtrace report .configtrace/run.ct.json --out .configtrace/report.html
+```
+
+ConfigTrace creates new output files and will not overwrite existing ones. Add `.configtrace/` to your application's `.gitignore` and keep trace artifacts private unless you have reviewed them for sharing.
+
+## Compare a failing run with a working run
+
+Create a private comparison key once:
+
+```sh
+npx configtrace keygen --out .configtrace/pair.key.json
+```
+
+Capture the failing run:
+
+```sh
+npx configtrace run --watch DATABASE_URL,API_URL --key .configtrace/pair.key.json --out .configtrace/broken.ct.json -- node app.js
+```
+
+Correct the launch environment or configuration, then capture the working run with the same comparison key:
+
+```sh
+npx configtrace run --watch DATABASE_URL,API_URL --key .configtrace/pair.key.json --out .configtrace/working.ct.json -- node app.js
+```
+
+Compare and diagnose the runs:
+
+```sh
+npx configtrace diff .configtrace/broken.ct.json .configtrace/working.ct.json
+npx configtrace diagnose .configtrace/broken.ct.json .configtrace/working.ct.json
+npx configtrace report .configtrace/broken.ct.json .configtrace/working.ct.json --out .configtrace/comparison.html
+```
+
+Do not commit or share `pair.key.json`. ConfigTrace needs the same private key to compare protected value identities across two runs.
+
+## Watch patterns and process options
+
+Use `*` and `?` to select groups of keys. Quote patterns so your shell does not expand them:
+
+```sh
+npx configtrace run --watch "DB_*,API_URL" --workers --children --source-maps --out .configtrace/run.ct.json -- node app.js
+```
+
+Worker and child-process tracing are opt-in. ConfigTrace reports incomplete coverage instead of pretending an unsupported process was observed.
+
+## Verify configuration rules
+
+Create a policy file such as `configtrace-policy.yaml`:
+
+```yaml
+version: 1
+coverage:
+  requireComplete: true
+rules:
+  DATABASE_URL:
+    required: true
+    read: required
+    immutableAfterFirstRead: true
+  LEGACY_API_KEY:
+    missing: true
+    read: forbidden
+```
+
+Run the check:
+
+```sh
+npx configtrace verify .configtrace/run.ct.json --policy configtrace-policy.yaml
+```
+
+The command exits with `0` when checks pass, `2` for a verified violation, and `3` when the available evidence is incomplete or inconclusive. This makes it suitable for CI without treating missing evidence as a pass.
+
+## Common commands
+
+| Command | What it does |
+|---|---|
+| `run` | Capture selected configuration activity while a Node.js application runs. |
+| `explain` | Show the available source and read evidence for one key. |
+| `diff` | Compare configuration behavior across two captures. |
+| `diagnose` | Rank differences that may be relevant to a failing run. |
+| `verify` | Check a capture against a YAML configuration policy. |
+| `report` | Create a private, offline HTML report. |
+| `doctor` | Check capture completeness and observation boundaries. |
+| `history` | Store and compare an explicitly ordered series of local captures. |
+| `export` | Create a reduced artifact for review before sharing. |
+
+Run `npx configtrace --help` for every command and option.
+
+## Use ConfigTrace as a library
+
+```js
+const {
+  readTrace,
+  buildProvenance,
+  diagnoseTraces,
+  verifyTrace
+} = require('configproof');
+
+const broken = readTrace('.configtrace/broken.ct.json');
+const working = readTrace('.configtrace/working.ct.json');
+
+const graph = buildProvenance(broken, { key: 'DATABASE_URL' });
+const diagnosis = diagnoseTraces(broken, working, { limit: 5 });
+const verification = verifyTrace(broken, {
+  rules: {
+    DATABASE_URL: {
+      required: true,
+      immutableAfterFirstRead: true
+    }
+  }
+});
+```
+
+TypeScript declarations are included with the package.
+
+## Read-only MCP access
+
+ConfigTrace can expose explicitly selected trace files to compatible coding tools through a local, read-only MCP server:
+
+```sh
+npx configtrace mcp --trace broken=/absolute/path/broken.ct.json --trace working=/absolute/path/working.ct.json
+```
+
+The server can explain and compare authorized traces. It cannot discover arbitrary files, run shell commands, launch applications, or return raw configuration values. See [the MCP example](examples/mcp/stdio-server.json) for a generic process definition.
+
+## Privacy and safety
+
+ConfigTrace is local-first: it has no telemetry, upload service, or remote assets in generated reports.
+
+Captured values are protected, but metadata can still be sensitive. Key names, paths, timestamps, source labels, and application output may reveal information about your system. ConfigTrace does not sanitize your application's stdout or stderr. Review every artifact or export before sharing it.
+
+ConfigTrace provides evidence for debugging; it does not change your configuration or prove a single root cause automatically.
+
+Read the [privacy model](docs/PRIVACY.md) and [architecture overview](docs/ARCHITECTURE.md) for deeper technical detail.
+
+## Support and contributing
+
+- Report bugs or request features through [GitHub Issues](https://github.com/sonusharma26/configtrace/issues).
+- See [CONTRIBUTING.md](CONTRIBUTING.md) before submitting a change.
+- Review [SECURITY.md](SECURITY.md) for security-reporting guidance.
+
+## License
+
+[MIT](LICENSE)

package/dist/adapters/dotenv.d.ts

@@ -0,0 +1,3 @@
+import type { AdapterContext } from '../runtime/api';
+/** Observe the installed dotenv implementation; do not replace its parser or populate logic. */
+export declare function installDotenv(context: AdapterContext): () => void;

package/dist/adapters/dotenv.js

@@ -0,0 +1,277 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installDotenv = installDotenv;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_module_1 = __importStar(require("node:module"));
+const node_url_1 = require("node:url");
+const registry_1 = require("./registry");
+/** Observe the installed dotenv implementation; do not replace its parser or populate logic. */
+function installDotenv(context) {
+    const { recorder, originalEnv, root } = context;
+    const internals = node_module_1.default;
+    const originalLoad = internals._load;
+    const originalRead = node_fs_1.default.readFileSync;
+    const frames = [];
+    const origins = new WeakMap();
+    const patched = new WeakSet();
+    const cleanups = [];
+    let copies = 0;
+    const readHook = function (...args) {
+        const frame = frames.at(-1);
+        if (!frame || recorder.suppressed)
+            return Reflect.apply(originalRead, node_fs_1.default, args);
+        let file;
+        if (typeof args[0] === 'string')
+            file = node_path_1.default.resolve(process.cwd(), args[0]);
+        else if (args[0] instanceof URL && args[0].protocol === 'file:')
+            file = (0, node_url_1.fileURLToPath)(args[0]);
+        try {
+            const result = Reflect.apply(originalRead, node_fs_1.default, args);
+            frame.lastRead = { result, file };
+            recorder.loader(file, 'read-success');
+            return result;
+        }
+        catch (error) {
+            frame.lastRead = undefined;
+            recorder.loader(file, 'read-failed');
+            throw error; // Preserve the loader's original exception, without recording its message.
+        }
+    };
+    node_fs_1.default.readFileSync = readHook;
+    function patch(filename, exported) {
+        if (!exported || typeof exported !== 'object' || patched.has(exported) || copies >= 8)
+            return;
+        let version;
+        try {
+            const packageFile = node_path_1.default.resolve(node_path_1.default.dirname(filename), '../package.json');
+            const pkg = JSON.parse(Reflect.apply(originalRead, node_fs_1.default, [packageFile, 'utf8']));
+            if (pkg.name !== 'dotenv' || typeof pkg.version !== 'string')
+                return;
+            version = pkg.version;
+        }
+        catch {
+            return;
+        }
+        if (!/^(16|17)\./.test(version) || typeof exported.populate !== 'function' || typeof exported.parse !== 'function') {
+            recorder.notice('dotenv_version_unverified');
+            return;
+        }
+        patched.add(exported);
+        copies++;
+        recorder.notice('dotenv_attached');
+        recorder.declareAdapter(registry_1.DOTENV_MANIFEST, version);
+        function replace(name, make) {
+            const original = exported[name];
+            if (typeof original !== 'function')
+                return;
+            const wrapped = make(original);
+            exported[name] = wrapped;
+            cleanups.push(() => { if (exported[name] === wrapped)
+                exported[name] = original; });
+        }
+        replace('parse', original => function (...args) {
+            const parsed = Reflect.apply(original, this, args);
+            try {
+                const read = frames.at(-1)?.lastRead;
+                // Only associate a file when the exact result of the observed read was parsed.
+                const file = read && read.result === args[0] ? read.file : undefined;
+                const map = new Map();
+                if (parsed && typeof parsed === 'object') {
+                    for (const key of Object.keys(parsed))
+                        if (recorder.watch.matches(key) && map.size < 256) {
+                            map.set(recorder.watch.canonical(key), { kind: 'dotenv', confidence: file ? 'observed' : 'unknown', file });
+                        }
+                    origins.set(parsed, map);
+                }
+                if (!file)
+                    recorder.notice('dotenv_source_unknown');
+            }
+            catch {
+                recorder.notice('adapter_failed');
+            }
+            return parsed;
+        });
+        replace('populate', original => function (...args) {
+            const [target, parsed, options] = args;
+            const isEnvironment = target === process.env;
+            const originalTarget = target === originalEnv;
+            const candidates = [];
+            let canInspect = false;
+            let override = false;
+            try {
+                if (options !== undefined) {
+                    const descriptor = Object.getOwnPropertyDescriptor(options, 'override');
+                    if (descriptor && (!('value' in descriptor) || typeof descriptor.value !== 'boolean'))
+                        override = undefined;
+                    else
+                        override = descriptor?.value ?? false;
+                }
+                const proto = parsed && Object.getPrototypeOf(parsed);
+                canInspect = !!target && !!parsed && (proto === Object.prototype || proto === null);
+                if (canInspect) {
+                    const map = origins.get(parsed);
+                    recorder.suppress(() => {
+                        for (const key of Object.keys(parsed)) {
+                            if (!recorder.watch.matches(key))
+                                continue;
+                            if (candidates.length >= 256) {
+                                recorder.notice('key_limit');
+                                break;
+                            }
+                            const item = Object.getOwnPropertyDescriptor(parsed, key);
+                            if (!item || !('value' in item) || typeof item.value !== 'string')
+                                continue;
+                            const before = Object.getOwnPropertyDescriptor(target, key);
+                            if (before && !('value' in before)) {
+                                canInspect = false;
+                                continue;
+                            }
+                            candidates.push({ key, raw: item.value, before: before?.value, had: !!before,
+                                previousId: recorder.latestId(key),
+                                origin: map?.get(recorder.watch.canonical(key)) ?? { kind: 'dotenv', confidence: 'unknown' },
+                            });
+                        }
+                    });
+                }
+                if (override === undefined || !canInspect)
+                    recorder.notice('dotenv_options_unsupported');
+                if (originalTarget && !isEnvironment)
+                    recorder.notice('dotenv_custom_target');
+            }
+            catch {
+                canInspect = false;
+                recorder.notice('adapter_failed');
+            }
+            if (isEnvironment && canInspect) {
+                for (const item of candidates)
+                    recorder.observe('candidate', item.key, item.raw, { origin: item.origin });
+            }
+            const originFor = (key) => candidates.find(c => recorder.watch.canonical(c.key) === recorder.watch.canonical(key))?.origin
+                ?? { kind: 'dotenv', confidence: 'unknown' };
+            const result = isEnvironment
+                ? recorder.withOrigin(originFor, () => Reflect.apply(original, this, args))
+                : Reflect.apply(original, this, args);
+            try {
+                if (canInspect) {
+                    const targetOrigins = origins.get(target) ?? new Map();
+                    for (const item of candidates) {
+                        const after = recorder.suppress(() => Object.getOwnPropertyDescriptor(target, item.key)?.value);
+                        if (isEnvironment && item.had && recorder.latestId(item.key) === item.previousId && after === item.before) {
+                            // Observation: this supported populate call performed no captured assignment for the candidate.
+                            // We do not claim to have intercepted an internal "if (override)" branch.
+                            recorder.observe('skip', item.key, after, { origin: item.origin, candidate: item.raw, hasCandidate: true, outcome: 'not-applied' });
+                        }
+                        if (!isEnvironment && !originalTarget && after === item.raw && (!item.had || item.before !== after)) {
+                            // Intermediate multi-file merges use dotenv's documented precedence, hence inferred.
+                            targetOrigins.set(recorder.watch.canonical(item.key), { ...item.origin, confidence: item.origin.file ? 'inferred' : 'unknown' });
+                        }
+                        else if (!isEnvironment && !originalTarget && item.had && item.before === after && after === item.raw) {
+                            // Equal-valued candidates from different files cannot be disambiguated by a net snapshot.
+                            targetOrigins.set(recorder.watch.canonical(item.key), { kind: 'dotenv', confidence: 'unknown' });
+                        }
+                    }
+                    if (!isEnvironment && !originalTarget)
+                        origins.set(target, targetOrigins);
+                }
+            }
+            catch {
+                recorder.notice('adapter_failed');
+            }
+            return result;
+        });
+        for (const name of ['config', 'configDotenv'])
+            replace(name, original => function (...args) {
+                frames.push({});
+                try {
+                    const opts = args[0];
+                    const desc = opts && typeof opts === 'object' ? Object.getOwnPropertyDescriptor(opts, 'processEnv') : undefined;
+                    if (desc && (!('value' in desc) || (desc.value && desc.value !== process.env)))
+                        recorder.notice('dotenv_custom_target');
+                }
+                catch {
+                    recorder.notice('dotenv_options_unsupported');
+                }
+                try {
+                    return Reflect.apply(original, this, args);
+                }
+                finally {
+                    frames.pop();
+                }
+            });
+    }
+    const loadHook = function (request, parent, isMain) {
+        const result = Reflect.apply(originalLoad, internals, [request, parent, isMain]);
+        const relevant = request === 'dotenv' || request.startsWith('dotenv/') || /[/\\]dotenv[/\\]/.test(request)
+            || !!parent?.filename?.match(/[/\\]dotenv[/\\]/);
+        if (relevant) {
+            try {
+                const resolved = internals._resolveFilename(request, parent);
+                if (/[/\\]lib[/\\]main\.js$/.test(resolved))
+                    patch(resolved, result);
+            }
+            catch {
+                recorder.notice('adapter_failed');
+            }
+        }
+        return result;
+    };
+    internals._load = loadHook;
+    // Eagerly patch the cwd-resolved CJS dotenv export before ESM namespace snapshots can form.
+    // This intentionally loads dotenv's main module early; it does not invoke config().
+    try {
+        const appRequire = (0, node_module_1.createRequire)(node_path_1.default.join(root, '__configtrace_resolve__.cjs'));
+        const resolved = appRequire.resolve('dotenv');
+        const exported = appRequire(resolved);
+        patch(resolved, exported);
+        recorder.notice('dotenv_eager_load');
+    }
+    catch {
+        recorder.notice('dotenv_not_seen');
+    }
+    return () => {
+        for (const cleanup of cleanups.reverse())
+            cleanup();
+        if (internals._load === loadHook)
+            internals._load = originalLoad;
+        if (node_fs_1.default.readFileSync === readHook)
+            node_fs_1.default.readFileSync = originalRead;
+    };
+}
+//# sourceMappingURL=dotenv.js.map

package/dist/adapters/dotenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.js","sourceRoot":"","sources":["../../src/adapters/dotenv.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,sCAqLC;AAtMD,sDAAyB;AACzB,0DAA6B;AAC7B,2DAAoD;AACpD,uCAAyC;AAEzC,yCAA6C;AAW7C,gGAAgG;AAChG,SAAgB,aAAa,CAAC,OAAuB;IACnD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAChD,MAAM,SAAS,GAAG,qBAAoC,CAAC;IACvD,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC;IACrC,MAAM,YAAY,GAAG,iBAAE,CAAC,YAAY,CAAC;IACrC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,EAA+B,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAU,CAAC;IACtC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,QAAQ,GAAG,UAAwB,GAAG,IAAW;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,UAAU;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,iBAAE,EAAE,IAAI,CAAC,CAAC;QAChF,IAAI,IAAwB,CAAC;QAC7B,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aACxE,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO;YAAE,IAAI,GAAG,IAAA,wBAAa,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,iBAAE,EAAE,IAAI,CAAC,CAAC;YACrD,KAAK,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAClC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC3B,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC,CAAC,2EAA2E;QAC1F,CAAC;IACH,CAAC,CAAC;IACF,iBAAE,CAAC,YAAY,GAAG,QAAkC,CAAC;IAErD,SAAS,KAAK,CAAC,QAAgB,EAAE,QAAa;QAC5C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO;QAC9F,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,mBAAI,CAAC,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,iBAAE,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAW,CAAC,CAAC;YACzF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO;YACrE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACnH,QAAQ,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM,EAAE,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACnC,QAAQ,CAAC,cAAc,CAAC,0BAAe,EAAE,OAAO,CAAC,CAAC;QAElD,SAAS,OAAO,CAAC,IAAY,EAAE,IAAsC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,OAAO,QAAQ,KAAK,UAAU;gBAAE,OAAO;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAwB,GAAG,IAAW;YACjE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;gBACrC,+EAA+E;gBAC/E,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;gBACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;wBAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;4BACzF,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC9G,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC3B,CAAC;gBACD,IAAI,CAAC,IAAI;oBAAE,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAAC,CAAC;YAC9C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAwB,GAAG,IAAW;YACpE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;YACvC,MAAM,aAAa,GAAG,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC;YAC7C,MAAM,cAAc,GAAG,MAAM,KAAK,WAAW,CAAC;YAC9C,MAAM,UAAU,GAA4G,EAAE,CAAC;YAC/H,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,IAAI,QAAQ,GAAwB,KAAK,CAAC;YAC1C,IAAI,CAAC;gBACH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBACxE,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC;wBAAE,QAAQ,GAAG,SAAS,CAAC;;wBACvG,QAAQ,GAAG,UAAU,EAAE,KAAK,IAAI,KAAK,CAAC;gBAC7C,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBACtD,UAAU,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;gBACpF,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAChC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE;wBACrB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;4BACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gCAAE,SAAS;4BAC3C,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gCAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gCAAC,MAAM;4BAAC,CAAC;4BACtE,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;4BAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gCAAE,SAAS;4BAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;4BAC5D,IAAI,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC;gCAAC,UAAU,GAAG,KAAK,CAAC;gCAAC,SAAS;4BAAC,CAAC;4BACrE,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM;gCAC1E,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gCAClC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE;6BAC7F,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU;oBAAE,QAAQ,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;gBACzF,IAAI,cAAc,IAAI,CAAC,aAAa;oBAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAChF,CAAC;YAAC,MAAM,CAAC;gBAAC,UAAU,GAAG,KAAK,CAAC;gBAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAAC,CAAC;YAElE,IAAI,aAAa,IAAI,UAAU,EAAE,CAAC;gBAChC,KAAK,MAAM,IAAI,IAAI,UAAU;oBAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5G,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM;mBACrI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,aAAa;gBAC1B,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3E,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC;gBACH,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;oBACvE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;wBAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;wBAChG,IAAI,aAAa,IAAI,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;4BAC1G,gGAAgG;4BAChG,0EAA0E;4BAC1E,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;wBACtI,CAAC;wBACD,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,IAAI,KAAK,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,EAAE,CAAC;4BACpG,qFAAqF;4BACrF,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;wBACnI,CAAC;6BAAM,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;4BACxG,0FAA0F;4BAC1F,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;wBACnG,CAAC;oBACH,CAAC;oBACD,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc;wBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAAC,CAAC;YAC9C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC;YAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAwB,GAAG,IAAW;gBAC7G,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACrB,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAChH,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;wBAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC1H,CAAC;gBAAC,MAAM,CAAC;oBAAC,QAAQ,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;gBAAC,CAAC;gBAC1D,IAAI,CAAC;oBAAC,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;wBAC3C,CAAC;oBAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,UAAS,OAAe,EAAE,MAAyB,EAAE,MAAe;QACnF,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;eACrG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACnD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC7D,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAAC,CAAC;QAChD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,SAAS,CAAC,KAAK,GAAG,QAAQ,CAAC;IAC3B,4FAA4F;IAC5F,oFAAoF;IACpF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAA,2BAAa,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAAC,CAAC;IAC/C,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,CAAC;QACpD,IAAI,SAAS,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS,CAAC,KAAK,GAAG,YAAY,CAAC;QACjE,IAAI,iBAAE,CAAC,YAAY,KAAK,QAAQ;YAAE,iBAAE,CAAC,YAAY,GAAG,YAAY,CAAC;IACnE,CAAC,CAAC;AACJ,CAAC"}

package/dist/adapters/native-env.d.ts

@@ -0,0 +1,7 @@
+import type { AdapterContext } from '../runtime/api';
+/** Only describes the options Node exposes. It does not re-run startup parsing. */
+export declare function nativeEnvFlags(argv: readonly string[]): Array<{
+    file: string;
+    method: '--env-file' | '--env-file-if-exists';
+}>;
+export declare function installNativeEnv({ recorder, originalEnv }: AdapterContext): () => void;