safelaunch 1.0.9 → 1.0.11

package/README.md

@@ -1,5 +1,4 @@
 # safelaunch
-
 > Catch what breaks production before it breaks.
 
 safelaunch is a comprehensive environment validator for JavaScript projects. Run it before every push to catch everything that will break production.
@@ -24,7 +23,7 @@ safelaunch validate
 
 ## What safelaunch checks
 
-safelaunch validate runs 7 checks:
+safelaunch validate runs 11 checks:
 
 1. Missing required environment variables
 2. Empty required environment variables
@@ -33,12 +32,16 @@ safelaunch validate runs 7 checks:
 5. Dependencies not installed
 6. Dependency drift (in package.json but not installed)
 7. Variables in .env.example but missing from .env
+8. VITE_ prefix warning (Vite projects — variables without VITE_ won't be exposed to the client)
+9. REACT_APP_ prefix warning (CRA projects — variables without REACT_APP_ won't be exposed to the client)
+10. NEXT_PUBLIC_ prefix awareness (Next.js — flags variables intended for the client)
+11. .env file priority conflicts (Next.js — warns when .env.local overrides .env silently)
 
 ## Example output
 
 Running safelaunch...
 
-project type: Node.js
+project type: Next.js
 
 ⚠️  RUNTIME MISMATCH
 
@@ -49,6 +52,10 @@ project type: Node.js
 
    express   in package.json but not installed
 
+⚠️  ENV FILE PRIORITY (1 found)
+
+   DATABASE_URL   in both .env and .env.local (.env.local takes priority)
+
 ❌ EMPTY VARIABLES (1 found)
 
    DATABASE_URL   required but empty in .env
@@ -68,9 +75,9 @@ Your environment is not ready for production.
 safelaunch automatically detects your project type.
 
 - Node.js       scans process.env
-- Next.js       scans process.env
-- Vite          scans import.meta.env
-- React CRA     scans process.env REACT_APP_ variables
+- Next.js       scans process.env, checks NEXT_PUBLIC_ and .env priority
+- Vite          scans import.meta.env, checks VITE_ prefix
+- React CRA     scans process.env, checks REACT_APP_ prefix
 
 ## CI Integration
 
@@ -78,7 +85,6 @@ Add this to your GitHub Actions workflow:
 
 - name: Install safelaunch
   run: npm install -g safelaunch
-
 - name: Validate environment
   run: safelaunch validate
 
@@ -87,5 +93,6 @@ Blocks deployments automatically if any check fails.
 ## Built by Orches
 
 Deployment Reliability Infrastructure.
+
 GitHub: https://github.com/karthicedric7-cloud/safelaunch
 VS Code: https://marketplace.visualstudio.com/items?itemName=Orches.deploycheck-vscode

package/deploycheck-vscode/.vscode/launch.json

@@ -0,0 +1,15 @@
+{
+    // Use IntelliSense to learn about possible attributes.
+    // Hover to view descriptions of existing attributes.
+    // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "type": "chrome",
+            "request": "launch",
+            "name": "Launch Chrome against localhost",
+            "url": "http://localhost:8080",
+            "webRoot": "${workspaceFolder}"
+        }
+    ]
+}

package/deploycheck-vscode/README.md

@@ -0,0 +1,64 @@
+# deploycheck
+
+> Catch what breaks production before it breaks.
+
+Real time environment validation inside VS Code. deploycheck runs 7 checks on your environment before you push to production.
+
+Works with Node.js, Next.js, Vite, and Create React App. Automatically detects your project type.
+
+## Commands
+
+Open the Command Palette with Ctrl+Shift+P and run:
+
+**deploycheck: Generate env.manifest.json**
+Scans your entire project for environment variables and automatically generates env.manifest.json.
+
+Works with:
+- process.env for Node.js and Next.js projects
+- import.meta.env for Vite projects
+- REACT_APP_ variables for Create React App
+
+**deploycheck: Validate Environment**
+Runs 7 checks on your environment and tells you exactly what will break before you push.
+
+## What deploycheck checks
+
+1. Missing required environment variables
+2. Empty required environment variables
+3. Runtime version mismatch (Node version)
+4. Duplicate variables in .env
+5. Dependencies not installed
+6. Dependency drift (in package.json but not installed)
+7. Variables in .env.example but missing from .env
+
+## Supported project types
+
+deploycheck automatically detects your project type.
+
+- Node.js       scans process.env
+- Next.js       scans process.env
+- Vite          scans import.meta.env
+- React CRA     scans REACT_APP_ variables
+
+## How it works
+
+Step 1: Open your project in VS Code
+Step 2: Press Ctrl+Shift+P
+Step 3: Type deploycheck
+Step 4: Run Generate to create your manifest
+Step 5: Run Validate before every push
+
+## CLI Version
+
+For terminal and CI use install the CLI:
+
+npm install -g safelaunch
+
+safelaunch init
+safelaunch validate
+
+## Built by Orches
+
+JavaScript Reliability Infrastructure.
+GitHub: https://github.com/karthicedric7-cloud/safelaunch
+npm: https://www.npmjs.com/package/safelaunch

package/deploycheck-vscode/init.js

@@ -0,0 +1,54 @@
+const fs = require('fs');
+const path = require('path');
+
+function scanFiles(dir, extensions, found = new Set()) {
+  const items = fs.readdirSync(dir);
+  for (const item of items) {
+    if (item === 'node_modules' || item === '.git') continue;
+    const full = path.join(dir, item);
+    const stat = fs.statSync(full);
+    if (stat.isDirectory()) {
+      scanFiles(full, extensions, found);
+    } else if (extensions.some(ext => item.endsWith(ext))) {
+      const content = fs.readFileSync(full, 'utf8');
+      const matches = content.matchAll(/process\.env\.([A-Z_][A-Z0-9_]*)/g);
+      for (const match of matches) {
+        found.add(match[1]);
+      }
+    }
+  }
+  return found;
+}
+
+function init() {
+  console.log('\nscanning project for environment variables...\n');
+  const cwd = process.cwd();
+  const extensions = ['.js', '.ts', '.jsx', '.tsx'];
+  const found = scanFiles(cwd, extensions);
+  if (found.size === 0) {
+    console.log('no process.env references found.\n');
+    return;
+  }
+  const variables = {};
+  for (const key of [...found].sort()) {
+    variables[key] = { required: true, description: '' };
+  }
+  const manifest = {
+    version: '1',
+    runtime: { node: process.version.replace('v', '').split('.')[0] },
+    variables
+  };
+  const manifestPath = path.join(cwd, 'env.manifest.json');
+  if (fs.existsSync(manifestPath)) {
+    console.log('env.manifest.json already exists. delete it first.\n');
+    return;
+  }
+  fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
+  console.log('found ' + found.size + ' environment variables:\n');
+  for (const key of [...found].sort()) {
+    console.log('  ' + key);
+  }
+  console.log('\ncreated env.manifest.json\n');
+}
+
+init();

package/deploycheck-vscode/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "deploycheck-vscode",
+  "displayName": "deploycheck",
+  "description": "Catch what breaks production before it breaks. Real time environment validation inside VS Code.",
+  "version": "0.0.10",
+  "publisher": "Orches",
+  "engines": {
+    "vscode": "^1.74.0"
+  },
+  "categories": [
+    "Linters"
+  ],
+  "activationEvents": [
+    "*"
+  ],
+  "main": "./src/extension.js",
+  "contributes": {
+    "commands": [
+      {
+        "command": "deploycheck.init",
+        "title": "deploycheck: Generate env.manifest.json"
+      },
+      {
+        "command": "deploycheck.validate",
+        "title": "deploycheck: Validate Environment"
+      }
+    ]
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "devDependencies": {
+    "@types/vscode": "^1.74.0"
+  }
+}

package/deploycheck-vscode/src/extension.js

@@ -0,0 +1,199 @@
+const vscode = require('vscode');
+const fs = require('fs');
+const path = require('path');
+
+function detectProjectType(cwd) {
+  if (fs.existsSync(path.join(cwd, 'vite.config.js')) ||
+      fs.existsSync(path.join(cwd, 'vite.config.ts'))) {
+    return 'vite';
+  }
+  if (fs.existsSync(path.join(cwd, 'next.config.js')) ||
+      fs.existsSync(path.join(cwd, 'next.config.ts'))) {
+    return 'next';
+  }
+  const packagePath = path.join(cwd, 'package.json');
+  if (fs.existsSync(packagePath)) {
+    const pkg = JSON.parse(fs.readFileSync(packagePath, 'utf8'));
+    const deps = Object.assign({}, pkg.dependencies, pkg.devDependencies);
+    if (deps['react-scripts']) return 'cra';
+  }
+  return 'node';
+}
+
+function scanFiles(dir, extensions, pattern, found = new Set()) {
+  const items = fs.readdirSync(dir);
+  for (const item of items) {
+    if (item === 'node_modules' || item === '.git') continue;
+    const full = path.join(dir, item);
+    const stat = fs.statSync(full);
+    if (stat.isDirectory()) {
+      scanFiles(full, extensions, pattern, found);
+    } else if (extensions.some(ext => item.endsWith(ext))) {
+      const content = fs.readFileSync(full, 'utf8');
+      const matches = content.matchAll(pattern);
+      for (const match of matches) found.add(match[1]);
+    }
+  }
+  return found;
+}
+
+function activate(context) {
+  const initCommand = vscode.commands.registerCommand('deploycheck.init', function () {
+    const workspaceFolders = vscode.workspace.workspaceFolders;
+    if (!workspaceFolders) {
+      vscode.window.showErrorMessage('deploycheck: No workspace folder open.');
+      return;
+    }
+    const cwd = workspaceFolders[0].uri.fsPath;
+    const manifestPath = path.join(cwd, 'env.manifest.json');
+
+    if (fs.existsSync(manifestPath)) {
+      vscode.window.showWarningMessage('deploycheck: env.manifest.json already exists. Delete it first to regenerate.');
+      return;
+    }
+
+    const projectType = detectProjectType(cwd);
+    const extensions = ['.js', '.ts', '.jsx', '.tsx', '.vue', '.svelte'];
+    const typeLabels = { vite: 'Vite', next: 'Next.js', cra: 'Create React App', node: 'Node.js' };
+
+    let pattern;
+    if (projectType === 'vite') {
+      pattern = /import\.meta\.env\.([A-Z_][A-Z0-9_]*)/g;
+    } else if (projectType === 'cra') {
+      pattern = /process\.env\.(REACT_APP_[A-Z0-9_]*)/g;
+    } else {
+      pattern = /process\.env\.([A-Z_][A-Z0-9_]*)/g;
+    }
+
+    const found = scanFiles(cwd, extensions, pattern);
+
+    if (found.size === 0) {
+      vscode.window.showInformationMessage('deploycheck: No environment variables found in your ' + typeLabels[projectType] + ' project.');
+      return;
+    }
+
+    const variables = {};
+    for (const key of [...found].sort()) {
+      variables[key] = { required: true, description: '' };
+    }
+
+    const manifest = {
+      version: '1',
+      projectType: projectType,
+      runtime: { node: process.version.replace('v', '').split('.')[0] },
+      variables
+    };
+
+    fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
+    vscode.window.showInformationMessage('deploycheck: Found ' + found.size + ' variables in ' + typeLabels[projectType] + ' project. Created env.manifest.json');
+
+    vscode.workspace.openTextDocument(manifestPath).then(doc => {
+      vscode.window.showTextDocument(doc);
+    });
+  });
+
+  const validateCommand = vscode.commands.registerCommand('deploycheck.validate', function () {
+    const workspaceFolders = vscode.workspace.workspaceFolders;
+    if (!workspaceFolders) {
+      vscode.window.showErrorMessage('deploycheck: No workspace folder open.');
+      return;
+    }
+    const cwd = workspaceFolders[0].uri.fsPath;
+    const manifestPath = path.join(cwd, 'env.manifest.json');
+
+    if (!fs.existsSync(manifestPath)) {
+      vscode.window.showWarningMessage('deploycheck: No env.manifest.json found. Run deploycheck.init first.');
+      return;
+    }
+
+    const envPath = path.join(cwd, '.env');
+    if (!fs.existsSync(envPath)) {
+      vscode.window.showErrorMessage('deploycheck: No .env file found.');
+      return;
+    }
+
+    const envVars = {};
+    const duplicates = [];
+    const seen = new Set();
+    const lines = fs.readFileSync(envPath, 'utf8').split('\n');
+    for (const line of lines) {
+      const match = line.match(/^([^=]+)=(.*)$/);
+      if (match) {
+        const key = match[1].trim();
+        if (seen.has(key)) duplicates.push(key);
+        seen.add(key);
+        envVars[key] = match[2].trim();
+      }
+    }
+
+    const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+    const projectType = manifest.projectType || detectProjectType(cwd);
+    const typeLabels = { vite: 'Vite', next: 'Next.js', cra: 'Create React App', node: 'Node.js' };
+
+    const missing = [];
+    const empty = [];
+
+    for (const [key, val] of Object.entries(manifest.variables || {})) {
+      if (val.required && key in envVars && envVars[key] === '') {
+        empty.push(key);
+      } else if (val.required && !(key in envVars)) {
+        missing.push(key);
+      }
+    }
+
+    const examplePath = path.join(cwd, '.env.example');
+    const exampleMissing = [];
+    if (fs.existsSync(examplePath)) {
+      const exLines = fs.readFileSync(examplePath, 'utf8').split('\n');
+      for (const line of exLines) {
+        const match = line.match(/^([^=]+)=(.*)$/);
+        if (match && !envVars[match[1].trim()]) exampleMissing.push(match[1].trim());
+      }
+    }
+
+    const nodeRequired = manifest.runtime && manifest.runtime.node ? String(manifest.runtime.node) : null;
+    const nodeActual = process.version.replace('v', '').split('.')[0];
+    const runtimeMismatch = nodeRequired && nodeRequired !== nodeActual;
+
+    const modulesPath = path.join(cwd, 'node_modules');
+    const packagePath = path.join(cwd, 'package.json');
+    let driftMissing = [];
+    let notInstalled = false;
+    if (fs.existsSync(packagePath)) {
+      if (!fs.existsSync(modulesPath)) {
+        notInstalled = true;
+      } else {
+        const pkg = JSON.parse(fs.readFileSync(packagePath, 'utf8'));
+        const deps = Object.keys(pkg.dependencies || {});
+        driftMissing = deps.filter(dep => !fs.existsSync(path.join(modulesPath, dep)));
+      }
+    }
+
+    const problems = [];
+    if (runtimeMismatch) problems.push('Runtime mismatch: need Node ' + nodeRequired + ' got ' + nodeActual);
+    if (duplicates.length > 0) problems.push('Duplicates: ' + duplicates.join(', '));
+    if (notInstalled) problems.push('node_modules missing. Run npm install.');
+    if (driftMissing.length > 0) problems.push('Drift: ' + driftMissing.join(', '));
+    if (exampleMissing.length > 0) problems.push('Missing from .env.example: ' + exampleMissing.join(', '));
+    if (empty.length > 0) problems.push('Empty: ' + empty.join(', '));
+    if (missing.length > 0) problems.push('Missing: ' + missing.join(', '));
+
+    const label = typeLabels[projectType] || 'Node.js';
+
+    if (problems.length === 0) {
+      vscode.window.showInformationMessage('deploycheck (' + label + '): ✅ Environment is ready for production.');
+    } else {
+      vscode.window.showErrorMessage('deploycheck (' + label + '): ❌ ' + problems[0]);
+      if (problems.length > 1) {
+        vscode.window.showWarningMessage('deploycheck: ' + (problems.length - 1) + ' more issue(s): ' + problems.slice(1).join(' | '));
+      }
+    }
+  });
+
+  context.subscriptions.push(initCommand);
+  context.subscriptions.push(validateCommand);
+}
+
+function deactivate() {}
+
+module.exports = { activate, deactivate };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safelaunch",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "Backend Reliability Infrastructure - catch what breaks production before it breaks",
   "main": "index.js",
   "bin": {

package/src/init.js

@@ -54,4 +54,54 @@ async function init() {
   const projectType = detectProjectType(cwd);
   const extensions = ['.js', '.ts', '.jsx', '.tsx', '.vue', '.svelte'];
   let pattern;
-  let typeLabel;
+  let typeLabel;
+
+  if (projectType === 'vite') {
+    pattern = /import\.meta\.env\.([A-Z_][A-Z0-9_]*)/g;
+    typeLabel = 'Vite';
+  } else if (projectType === 'cra') {
+    pattern = /process\.env\.(REACT_APP_[A-Z0-9_]*)/g;
+    typeLabel = 'Create React App';
+  } else if (projectType === 'next') {
+    pattern = /process\.env\.([A-Z_][A-Z0-9_]*)/g;
+    typeLabel = 'Next.js';
+  } else {
+    pattern = /process\.env\.([A-Z_][A-Z0-9_]*)/g;
+    typeLabel = 'Node.js';
+  }
+
+  console.log('detected project type: ' + typeLabel + '\n');
+  const found = scanFiles(cwd, extensions, pattern);
+
+  if (found.size === 0) {
+    console.log('no environment variables found in your project.\n');
+    await track('safelaunch_init_run', { project_type: projectType, vars_found: 0 });
+    await shutdown();
+    return;
+  }
+
+  const variables = {};
+  for (const key of [...found].sort()) {
+    variables[key] = { required: true, description: '' };
+  }
+
+  const manifest = {
+    version: '1',
+    projectType: projectType,
+    runtime: { node: process.version.replace('v', '').split('.')[0] },
+    variables
+  };
+
+  fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
+
+  console.log('found ' + found.size + ' environment variables:\n');
+  for (const key of [...found].sort()) {
+    console.log('  ' + key);
+  }
+  console.log('\ncreated env.manifest.json\n');
+
+  await track('safelaunch_init_run', { project_type: projectType, vars_found: found.size });
+  await shutdown();
+}
+
+init();

package/src/telemetry.js

@@ -1,6 +1,6 @@
 const { PostHog } = require('posthog-node');
 
-const client = new PostHog('phx_T3nHhNj4dVFDHRHbDaqoXTmqeic8kM6fa3nyjXpTanqxcVD', {
+const client = new PostHog('phc_WFm3O5H7wkZK2Ne3kyy5QgUXJR8y86SQbszSwk3BUn0', {
   host: 'https://us.i.posthog.com'
 });
 

package/src/validate.js

@@ -96,6 +96,49 @@ function checkDependencyDrift() {
   return { notInstalled: false, missing };
 }
 
+function checkPrefixes(envVars, projectType) {
+  const warnings = [];
+  for (const key of Object.keys(envVars)) {
+    if (key === 'NODE_ENV') continue;
+    if (projectType === 'vite' && !key.startsWith('VITE_')) {
+      warnings.push(key + '   missing VITE_ prefix (won\'t be exposed to client)');
+    }
+    if (projectType === 'cra' && !key.startsWith('REACT_APP_')) {
+      warnings.push(key + '   missing REACT_APP_ prefix (won\'t be exposed to client)');
+    }
+    if (projectType === 'next' && key.startsWith('NEXT_PUBLIC_') === false) {
+      // server-side only — no warning needed
+    }
+  }
+  return warnings;
+}
+
+function checkEnvPriority(cwd, projectType) {
+  if (projectType !== 'next') return [];
+  const warnings = [];
+  const fileVars = {};
+  const envFiles = ['.env', '.env.local', '.env.development', '.env.production'];
+  for (const file of envFiles) {
+    const filePath = path.join(cwd, file);
+    if (!fs.existsSync(filePath)) continue;
+    const vars = {};
+    const lines = fs.readFileSync(filePath, 'utf8').split('\n');
+    for (const line of lines) {
+      const match = line.match(/^([^=]+)=(.*)$/);
+      if (match) vars[match[1].trim()] = match[2].trim();
+    }
+    fileVars[file] = vars;
+  }
+  if (fileVars['.env'] && fileVars['.env.local']) {
+    for (const key of Object.keys(fileVars['.env'])) {
+      if (fileVars['.env.local'][key]) {
+        warnings.push(key + '   in both .env and .env.local (.env.local takes priority)');
+      }
+    }
+  }
+  return warnings;
+}
+
 async function validate() {
   console.log('\nRunning safelaunch...\n');
 
@@ -124,6 +167,8 @@ async function validate() {
   const runtimeMismatch = checkRuntime(manifest);
   const exampleMissing = checkEnvExample(envVars);
   const drift = checkDependencyDrift();
+  const prefixWarnings = checkPrefixes(envVars, projectType);
+  const priorityWarnings = checkEnvPriority(cwd, projectType);
 
   if (runtimeMismatch) {
     console.log('⚠️  RUNTIME MISMATCH\n');
@@ -161,6 +206,22 @@ async function validate() {
     console.log('');
   }
 
+  if (prefixWarnings.length > 0) {
+    console.log('⚠️  PREFIX WARNINGS (' + prefixWarnings.length + ' found)\n');
+    for (const w of prefixWarnings) {
+      console.log('   ' + w);
+    }
+    console.log('');
+  }
+
+  if (priorityWarnings.length > 0) {
+    console.log('⚠️  ENV FILE PRIORITY (' + priorityWarnings.length + ' found)\n');
+    for (const w of priorityWarnings) {
+      console.log('   ' + w);
+    }
+    console.log('');
+  }
+
   if (empty.length > 0) {
     console.log('❌ EMPTY VARIABLES (' + empty.length + ' found)\n');
     for (const key of empty) {
@@ -187,6 +248,7 @@ async function validate() {
 
   const hasFailed = runtimeMismatch || missing.length > 0 || empty.length > 0 ||
     duplicates.length > 0 || exampleMissing.length > 0 ||
+    prefixWarnings.length > 0 || priorityWarnings.length > 0 ||
     (drift && (drift.notInstalled || drift.missing.length > 0));
 
   if (hasFailed) {
@@ -198,7 +260,9 @@ async function validate() {
       empty: empty.length,
       duplicates: duplicates.length,
       runtime_mismatch: !!runtimeMismatch,
-      dependency_drift: !!(drift && drift.missing.length > 0)
+      dependency_drift: !!(drift && drift.missing.length > 0),
+      prefix_warnings: prefixWarnings.length,
+      priority_warnings: priorityWarnings.length
     });
     await shutdown();
     process.exit(1);
@@ -213,9 +277,4 @@ async function validate() {
   }
 }
 
-validate();
-```
-
-Save with **Cmd + S**. Now we need to publish this to npm. Go to Terminal and run:
-```
-cd ~/safelaunch/safelaunch
+validate();