ultraenv 1.0.1 → 1.0.3

package/dist/index.d.cts

@@ -2414,7 +2414,7 @@ declare function shannonEntropy(str: string): number;
  *
  * @example
  * isHighEntropy('my-database-password')  // false (~3.1)
- * isHighEntropy('sk_live_4eC39HqLyjWDarjtT1zdp7dc')  // true (~4.2)
+ * isHighEntropy('super_secret_token_4eC39HqLyjWDarjtT1zdp7dc')  // true (~4.2)
  * isHighEntropy('a]c!D@f#G$h%J^k&L*m')  // true (~4.0)
  */
 declare function isHighEntropy(str: string, threshold?: number): boolean;

package/dist/index.d.ts

@@ -2414,7 +2414,7 @@ declare function shannonEntropy(str: string): number;
  *
  * @example
  * isHighEntropy('my-database-password')  // false (~3.1)
- * isHighEntropy('sk_live_4eC39HqLyjWDarjtT1zdp7dc')  // true (~4.2)
+ * isHighEntropy('super_secret_token_4eC39HqLyjWDarjtT1zdp7dc')  // true (~4.2)
  * isHighEntropy('a]c!D@f#G$h%J^k&L*m')  // true (~4.0)
  */
 declare function isHighEntropy(str: string, threshold?: number): boolean;

package/dist/index.js

@@ -3,23 +3,23 @@ import {
   computeVaultChecksum,
   verifyIntegrity,
   verifyVaultChecksum
-} from "./chunk-N5PAV4NM.js";
+} from "./chunk-5WUBB633.js";
 import {
   compareEnvironments,
   formatComparison
-} from "./chunk-3UV2QNJL.js";
+} from "./chunk-LJSCUOD4.js";
 import {
   discoverEnvironments,
   getActiveEnvironment,
   listEnvironments,
   switchEnvironment,
   validateAllEnvironments
-} from "./chunk-GC7RXHLA.js";
+} from "./chunk-2MBSLURI.js";
 import {
   createEnvironment,
   duplicateEnvironment,
   removeEnvironment
-} from "./chunk-AWN6ADV7.js";
+} from "./chunk-6X3BUE5S.js";
 import {
   addCustomPattern,
   detectHighEntropyStrings,
@@ -35,7 +35,7 @@ import {
   scanLineForEntropy,
   scanStagedFiles,
   shannonEntropy
-} from "./chunk-MSXMESFP.js";
+} from "./chunk-OBLMAUCF.js";
 import {
   getEnvironmentData,
   getVaultEnvironments,
@@ -43,29 +43,29 @@ import {
   readVaultFile,
   serializeVaultFile,
   writeVaultFile
-} from "./chunk-NBOABPHM.js";
+} from "./chunk-72UKVOO5.js";
 import "./chunk-R7PZRSZ7.js";
 import {
   generateExampleContent,
   generateExampleFile,
   needsUpdate
-} from "./chunk-CHVO6NWI.js";
+} from "./chunk-LFIKYFPS.js";
 import {
   maskValue
 } from "./chunk-TE7HPLA6.js";
 import {
   compareSync,
   compareValues
-} from "./chunk-YVWLXFUT.js";
+} from "./chunk-LQZK6BBQ.js";
 import {
   generateDeclaration
-} from "./chunk-IGFVP24Q.js";
+} from "./chunk-3AF476D7.js";
 import {
   generateModule
-} from "./chunk-YMMP4VQL.js";
+} from "./chunk-H3QEGEZ6.js";
 import {
   generateJsonSchema
-} from "./chunk-6KS56D6E.js";
+} from "./chunk-7VJ7LK2M.js";
 import {
   expandVariables,
   load,
@@ -74,28 +74,28 @@ import {
   loadWithResultSync,
   mergeCascade,
   resolveCascade
-} from "./chunk-MNVFG7H4.js";
+} from "./chunk-XPZC32UY.js";
 import {
   parseEnvFile
-} from "./chunk-HFXQGJY3.js";
+} from "./chunk-CVJPO3QY.js";
 import {
   healthCheckRoute,
   ultraenvMiddleware
-} from "./chunk-IKPTKALB.js";
+} from "./chunk-F7YSINGU.js";
 import {
   createUltraenvPlugin,
   ultraenvPlugin
-} from "./chunk-JB7RKV3C.js";
+} from "./chunk-7AHG2IP4.js";
 import {
   defineEnv,
   t,
   tryDefineEnv,
   validate
-} from "./chunk-CIFMBJ4H.js";
+} from "./chunk-BNUHE2ZI.js";
 import {
   findConfig,
   loadConfig
-} from "./chunk-4XUYMRK5.js";
+} from "./chunk-GJC64ZG7.js";
 import {
   copyFile,
   ensureDir,
@@ -108,7 +108,7 @@ import {
   readFileSync,
   removeFile,
   writeFile
-} from "./chunk-3VYXPTYV.js";
+} from "./chunk-FSKVYBEP.js";
 import {
   deriveEnvironmentKey,
   formatKey,
@@ -119,14 +119,14 @@ import {
   parseKey,
   parseKeysFile,
   rotateKey
-} from "./chunk-UEWYFN6A.js";
+} from "./chunk-RJTUAMK3.js";
 import {
   decryptEnvironment,
   decryptValue,
   encryptEnvironment,
   encryptValue,
   isEncryptedValue
-} from "./chunk-2USZPWLZ.js";
+} from "./chunk-6NFA23AY.js";
 import {
   VERSION
 } from "./chunk-XC65ORJ5.js";
@@ -141,7 +141,7 @@ import {
   ValidationError,
   VaultError,
   isUltraenvError
-} from "./chunk-5G2DU52U.js";
+} from "./chunk-N7GOHQBF.js";
 
 // src/core/watcher.ts
 import { watch } from "fs";
@@ -258,11 +258,15 @@ var EnvFileWatcher = class {
     if (this.state.nativeWatchers.has(filePath)) return;
     if (this.shouldIgnore(filePath)) return;
     try {
-      const nativeWatcher = watch(filePath, {
-        persistent: true
-      }, (eventType, filename) => {
-        this.handleFileEvent(eventType, filePath, filename);
-      });
+      const nativeWatcher = watch(
+        filePath,
+        {
+          persistent: true
+        },
+        (eventType, filename) => {
+          this.handleFileEvent(eventType, filePath, filename);
+        }
+      );
       nativeWatcher.on("error", () => {
         this.emitChangeEvent(filePath);
         this.state.nativeWatchers.delete(filePath);
@@ -288,27 +292,31 @@ var EnvFileWatcher = class {
     const dirWatchKey = `__dir__:${dirPath}`;
     if (this.state.nativeWatchers.has(dirWatchKey)) return;
     try {
-      const nativeWatcher = watch(dirPath, {
-        persistent: true
-      }, (eventType, filename) => {
-        if (filename === null) return;
-        const fullPath = resolve(join(dirPath, filename));
-        if (isEnvFileName(filename) && !this.shouldIgnore(fullPath)) {
-          if (eventType === "rename") {
-            if (existsSync(fullPath) && !this.state.nativeWatchers.has(fullPath)) {
-              this.watchFile(fullPath);
-              this.debouncedEmit(fullPath, "add");
-            } else if (!existsSync(fullPath) && this.state.nativeWatchers.has(fullPath)) {
-              const watcher = this.state.nativeWatchers.get(fullPath);
-              if (watcher !== void 0) {
-                watcher.close();
-                this.state.nativeWatchers.delete(fullPath);
+      const nativeWatcher = watch(
+        dirPath,
+        {
+          persistent: true
+        },
+        (eventType, filename) => {
+          if (filename === null) return;
+          const fullPath = resolve(join(dirPath, filename));
+          if (isEnvFileName(filename) && !this.shouldIgnore(fullPath)) {
+            if (eventType === "rename") {
+              if (existsSync(fullPath) && !this.state.nativeWatchers.has(fullPath)) {
+                this.watchFile(fullPath);
+                this.debouncedEmit(fullPath, "add");
+              } else if (!existsSync(fullPath) && this.state.nativeWatchers.has(fullPath)) {
+                const watcher = this.state.nativeWatchers.get(fullPath);
+                if (watcher !== void 0) {
+                  watcher.close();
+                  this.state.nativeWatchers.delete(fullPath);
+                }
+                this.debouncedEmit(fullPath, "unlink");
               }
-              this.debouncedEmit(fullPath, "unlink");
             }
           }
         }
-      });
+      );
       nativeWatcher.on("error", () => {
         this.state.nativeWatchers.delete(dirWatchKey);
         setTimeout(() => {
@@ -429,9 +437,7 @@ var SecureBuffer = class _SecureBuffer {
    */
   constructor(size) {
     if (size < 1 || !Number.isInteger(size)) {
-      throw new RangeError(
-        `SecureBuffer: size must be a positive integer, got ${size}`
-      );
+      throw new RangeError(`SecureBuffer: size must be a positive integer, got ${size}`);
     }
     this._buffer = Buffer.alloc(size);
     this._length = size;
@@ -485,9 +491,7 @@ var SecureBuffer = class _SecureBuffer {
    */
   fill(value) {
     if (value < 0 || value > 255 || !Number.isInteger(value)) {
-      throw new RangeError(
-        `SecureBuffer.fill: value must be an integer 0-255, got ${value}`
-      );
+      throw new RangeError(`SecureBuffer.fill: value must be an integer 0-255, got ${value}`);
     }
     this._buffer.fill(value);
     this._zeroed = value === 0;
@@ -831,16 +835,12 @@ var SyncWatcher = class {
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     };
     try {
-      const needs = await needsUpdate(
-        this.options.envPath,
-        this.options.examplePath,
-        {
-          schemaPath: void 0,
-          includeDescriptions: this.options.includeDescriptions,
-          includeTypes: this.options.includeTypes,
-          includeDefaults: this.options.includeDefaults
-        }
-      );
+      const needs = await needsUpdate(this.options.envPath, this.options.examplePath, {
+        schemaPath: void 0,
+        includeDescriptions: this.options.includeDescriptions,
+        includeTypes: this.options.includeTypes,
+        includeDefaults: this.options.includeDefaults
+      });
       if (!needs) {
         result.success = true;
         if (this.options.onSync !== void 0) {
@@ -848,16 +848,12 @@ var SyncWatcher = class {
         }
         return;
       }
-      await generateExampleFile(
-        this.options.envPath,
-        this.options.examplePath,
-        {
-          schemaPath: void 0,
-          includeDescriptions: this.options.includeDescriptions,
-          includeTypes: this.options.includeTypes,
-          includeDefaults: this.options.includeDefaults
-        }
-      );
+      await generateExampleFile(this.options.envPath, this.options.examplePath, {
+        schemaPath: void 0,
+        includeDescriptions: this.options.includeDescriptions,
+        includeTypes: this.options.includeTypes,
+        includeDefaults: this.options.includeDefaults
+      });
       result.success = true;
       this.emitEvent({
         type: "change",
@@ -1296,11 +1292,7 @@ var nextjsPreset = {
 };
 
 // src/presets/vite.ts
-var VITE_MODES = [
-  "development",
-  "production",
-  "test"
-];
+var VITE_MODES = ["development", "production", "test"];
 var viteSchema = {
   // ── Public (client-exposed) Variables ──────────────────────────────
   VITE_API_URL: {
@@ -2522,10 +2514,8 @@ var awsLambdaPreset = {
 var presets = {};
 function registerPreset(name, preset) {
   if (presets[name] !== void 0) {
-    process.stderr.write(
-      `[ultraenv] Warning: overwriting existing preset "${name}"
-`
-    );
+    process.stderr.write(`[ultraenv] Warning: overwriting existing preset "${name}"
+`);
   }
   presets[name] = preset;
 }
@@ -2571,9 +2561,7 @@ function healthCheck(options = {}) {
     validCount,
     metadata = {}
   } = options;
-  const envKeys = Object.entries(source).filter(
-    ([, value]) => value !== void 0 && value !== ""
-  );
+  const envKeys = Object.entries(source).filter(([, value]) => value !== void 0 && value !== "");
   const loaded = envKeys.length;
   const environment = detectEnvironment(source);
   const valid = validCount ?? loaded;
@@ -2616,13 +2604,7 @@ function readinessCheck(requiredVars, source) {
   };
 }
 function detectEnvironment(env) {
-  const candidates = [
-    "NODE_ENV",
-    "APP_ENV",
-    "ENVIRONMENT",
-    "ENV",
-    "STAGE"
-  ];
+  const candidates = ["NODE_ENV", "APP_ENV", "ENVIRONMENT", "ENV", "STAGE"];
   for (const candidate of candidates) {
     const value = env[candidate];
     if (value !== void 0 && value !== "") {
@@ -2654,11 +2636,7 @@ function drawTitledBox(title, lines, chars = DOUBLE) {
   if (lines.length === 0) {
     return [hRuleTitled(title, 0, chars), boxLine("", 0, chars), hRuleBottom(0, chars)].join("\n");
   }
-  const innerWidth = Math.max(
-    ...lines.map((line) => stripAnsi(line).length),
-    title.length + 2,
-    0
-  );
+  const innerWidth = Math.max(...lines.map((line) => stripAnsi(line).length), title.length + 2, 0);
   const result = [];
   result.push(hRuleTitled(title, innerWidth, chars));
   for (const line of lines) {
@@ -2713,7 +2691,9 @@ function reportValidation(result, options = {}) {
   const c = color ? ANSI : noColorANSI();
   if (result.valid) {
     const lines = [];
-    lines.push(`${c.green}${c.bold}  \u2713${c.reset}  All ${Object.keys(result.validated).length} variables passed validation`);
+    lines.push(
+      `${c.green}${c.bold}  \u2713${c.reset}  All ${Object.keys(result.validated).length} variables passed validation`
+    );
     if (result.warnings.length > 0) {
       lines.push("");
       for (const warning of result.warnings) {
@@ -2743,13 +2723,17 @@ function reportValidation(result, options = {}) {
     output.push("");
     const warningLines = [];
     for (const warning of result.warnings) {
-      warningLines.push(`${c.yellow}\u26A0${c.reset} ${warning.field}: ${warning.message} ${c.dim}[${warning.code}]${c.reset}`);
+      warningLines.push(
+        `${c.yellow}\u26A0${c.reset} ${warning.field}: ${warning.message} ${c.dim}[${warning.code}]${c.reset}`
+      );
     }
     output.push(warningLines.join("\n"));
   }
   if (result.unknown.length > 0) {
     output.push("");
-    output.push(`${c.gray}?${c.reset}  Unknown variables: ${result.unknown.map((u) => `${c.dim}${u}${c.reset}`).join(", ")}`);
+    output.push(
+      `${c.gray}?${c.reset}  Unknown variables: ${result.unknown.map((u) => `${c.dim}${u}${c.reset}`).join(", ")}`
+    );
   }
   return output.join("\n");
 }
@@ -2757,10 +2741,7 @@ function reportError(error, options = {}) {
   const { color = true, boxStyle = DEFAULT_BOX } = options;
   const c = color ? ANSI : noColorANSI();
   const code = error.code ?? "ULTRAENV_ERROR";
-  const lines = [
-    `${c.red}${c.bold}Error [${code}]${c.reset}`,
-    `  ${error.message}`
-  ];
+  const lines = [`${c.red}${c.bold}Error [${code}]${c.reset}`, `  ${error.message}`];
   if (error.hint !== void 0) {
     lines.push("");
     lines.push(`${c.cyan}  \u{1F4A1} ${error.hint}${c.reset}`);

package/dist/{init-Y7JQ2KYJ.js → init-KBLVTHQW.js}

@@ -15,14 +15,14 @@ import {
 import {
   exists,
   writeFile
-} from "./chunk-3VYXPTYV.js";
+} from "./chunk-FSKVYBEP.js";
 import {
   DEFAULT_GITIGNORE_ENTRIES
 } from "./chunk-XC65ORJ5.js";
 import {
   FileSystemError,
   getErrorMessage
-} from "./chunk-5G2DU52U.js";
+} from "./chunk-N7GOHQBF.js";
 
 // src/cli/commands/init.ts
 import { resolve, join } from "path";
@@ -65,14 +65,18 @@ async function run(args, ctx) {
     const envDir = await prompt("  Environment directory", { default: "." });
     writeLine("");
     writeLine(cyan("  Creating configuration..."));
-    const configContent = JSON.stringify({
-      envDir,
-      expandVariables: true,
-      overrideProcessEnv: false,
-      mergeStrategy: "last-wins",
-      outputFormat: "terminal",
-      debug: false
-    }, null, 2) + "\n";
+    const configContent = JSON.stringify(
+      {
+        envDir,
+        expandVariables: true,
+        overrideProcessEnv: false,
+        mergeStrategy: "last-wins",
+        outputFormat: "terminal",
+        debug: false
+      },
+      null,
+      2
+    ) + "\n";
     await writeFile(configPath, configContent);
     writeLine(green(`  \u2713 Created ${configPath}`));
     if (!await exists(envPath)) {
@@ -109,7 +113,7 @@ LOG_LEVEL=info
     }
     const gitignorePath = join(baseDir, ".gitignore");
     if (await exists(gitignorePath)) {
-      const { readFile } = await import("./fs-VH7ATUS3.js");
+      const { readFile } = await import("./fs-7HKOZY5K.js");
       const existingContent = await readFile(gitignorePath);
       if (!existingContent.includes("# ultraenv")) {
         const { appendFileSync } = await import("fs");

package/dist/{install-hook-SKXIV6NV.js → install-hook-42F22BLY.js}

@@ -16,8 +16,8 @@ import {
   ensureDir,
   exists,
   writeFile
-} from "./chunk-3VYXPTYV.js";
-import "./chunk-5G2DU52U.js";
+} from "./chunk-FSKVYBEP.js";
+import "./chunk-N7GOHQBF.js";
 
 // src/cli/commands/install-hook.ts
 import { resolve, join } from "path";

package/dist/{json-schema-I26YNQBH.js → json-schema-YULPWDKA.js}

@@ -1,9 +1,9 @@
 import {
   generateJsonSchema,
   generateJsonSchemaContent
-} from "./chunk-6KS56D6E.js";
-import "./chunk-3VYXPTYV.js";
-import "./chunk-5G2DU52U.js";
+} from "./chunk-7VJ7LK2M.js";
+import "./chunk-FSKVYBEP.js";
+import "./chunk-N7GOHQBF.js";
 export {
   generateJsonSchema,
   generateJsonSchemaContent

package/dist/{key-manager-O3G55WPU.js → key-manager-WDWPX3IQ.js}

@@ -8,10 +8,10 @@ import {
   parseKey,
   parseKeysFile,
   rotateKey
-} from "./chunk-UEWYFN6A.js";
-import "./chunk-2USZPWLZ.js";
+} from "./chunk-RJTUAMK3.js";
+import "./chunk-6NFA23AY.js";
 import "./chunk-XC65ORJ5.js";
-import "./chunk-5G2DU52U.js";
+import "./chunk-N7GOHQBF.js";
 export {
   deriveEnvironmentKey,
   formatKey,

package/dist/middleware/express.cjs

@@ -82,9 +82,7 @@ function buildFilteredEnv(source, prefixes, allowSet, denySet, exposePublic, exp
 function healthCheckRoute(options = {}) {
   const { source = process.env, metadata = {} } = options;
   return (_req, res) => {
-    const envKeys = Object.keys(source).filter(
-      (k) => source[k] !== void 0 && source[k] !== ""
-    );
+    const envKeys = Object.keys(source).filter((k) => source[k] !== void 0 && source[k] !== "");
     const nodeEnv = source["NODE_ENV"] ?? "unknown";
     const response = {
       status: "ok",

package/dist/middleware/express.js

@@ -1,7 +1,7 @@
 import {
   healthCheckRoute,
   ultraenvMiddleware
-} from "../chunk-IKPTKALB.js";
+} from "../chunk-F7YSINGU.js";
 export {
   healthCheckRoute,
   ultraenvMiddleware

package/dist/middleware/fastify.cjs

@@ -45,13 +45,7 @@ function ultraenvPlugin(fastify, options = {}, done) {
   }
   const allowSet = new Set(allowList.map((k) => k.toUpperCase()));
   const denySet = new Set(denyList.map((k) => k.toUpperCase()));
-  const filteredEnv = buildFastifyEnv(
-    source,
-    allPrefixes,
-    allowSet,
-    denySet,
-    exposeNodeEnv
-  );
+  const filteredEnv = buildFastifyEnv(source, allPrefixes, allowSet, denySet, exposeNodeEnv);
   fastify.decorate("env", filteredEnv);
   done();
 }

package/dist/middleware/fastify.js

@@ -1,7 +1,7 @@
 import {
   createUltraenvPlugin,
   ultraenvPlugin
-} from "../chunk-JB7RKV3C.js";
+} from "../chunk-7AHG2IP4.js";
 export {
   createUltraenvPlugin,
   ultraenvPlugin

package/dist/{module-IDIZPP4M.js → module-FGH2V6N2.js}

@@ -1,9 +1,9 @@
 import {
   generateModule,
   generateModuleContent
-} from "./chunk-YMMP4VQL.js";
-import "./chunk-3VYXPTYV.js";
-import "./chunk-5G2DU52U.js";
+} from "./chunk-H3QEGEZ6.js";
+import "./chunk-FSKVYBEP.js";
+import "./chunk-N7GOHQBF.js";
 export {
   generateModule,
   generateModuleContent

package/dist/{protect-NCWPM6VC.js → protect-A4G7LQFJ.js}

@@ -20,18 +20,12 @@ import {
 import {
   exists,
   readFile
-} from "./chunk-3VYXPTYV.js";
-import "./chunk-5G2DU52U.js";
+} from "./chunk-FSKVYBEP.js";
+import "./chunk-N7GOHQBF.js";
 
 // src/cli/commands/protect.ts
 import { resolve, join } from "path";
-var PROTECTED_PATTERNS = [
-  ".env",
-  ".env.local",
-  ".env.*.local",
-  ".env.vault",
-  ".env.keys"
-];
+var PROTECTED_PATTERNS = [".env", ".env.local", ".env.*.local", ".env.vault", ".env.keys"];
 async function run(args, ctx) {
   try {
     const cwd = args.flags["--cwd"] ?? ctx.cwd;
@@ -51,13 +45,16 @@ async function run(args, ctx) {
     if (!gitignoreExists) {
       writeError(red("  \u2717 No .gitignore file found!"));
       writeLine("");
-      const box = drawBox([
-        "Your project has no .gitignore file.",
-        "Secrets in .env files could be committed to version control.",
-        "Create a .gitignore with ultraenv entries:",
-        "",
-        "  ultraenv init"
-      ], { title: "DANGER", border: "double" });
+      const box = drawBox(
+        [
+          "Your project has no .gitignore file.",
+          "Secrets in .env files could be committed to version control.",
+          "Create a .gitignore with ultraenv entries:",
+          "",
+          "  ultraenv init"
+        ],
+        { title: "DANGER", border: "double" }
+      );
       writeLine(box);
       writeLine("");
       return 1;
@@ -73,7 +70,9 @@ async function run(args, ctx) {
         issues.push(pattern);
       }
     }
-    writeLine(green(`  \u2713 ${protectedEntries.length}/${PROTECTED_PATTERNS.length} patterns protected`));
+    writeLine(
+      green(`  \u2713 ${protectedEntries.length}/${PROTECTED_PATTERNS.length} patterns protected`)
+    );
     const envFiles = [".env", ".env.local", ".env.production", ".env.development"];
     const notIgnored = [];
     for (const envFile of envFiles) {
@@ -104,13 +103,16 @@ async function run(args, ctx) {
           writeError(red(`    - ${f}`));
         }
         writeLine("");
-        const warnBox = drawBox([
-          "Tracked .env files may contain secrets.",
-          "Remove them from version control immediately:",
-          "",
-          "  git rm --cached .env*",
-          '  git commit -m "Remove tracked .env files"'
-        ], { title: "WARNING", border: "double" });
+        const warnBox = drawBox(
+          [
+            "Tracked .env files may contain secrets.",
+            "Remove them from version control immediately:",
+            "",
+            "  git rm --cached .env*",
+            '  git commit -m "Remove tracked .env files"'
+          ],
+          { title: "WARNING", border: "double" }
+        );
         writeLine(warnBox);
         writeLine("");
         return 1;

package/dist/{scan-TRLY36TT.js → scan-4BXGHR33.js}

@@ -1,7 +1,7 @@
 import {
   formatScanResult,
   scan
-} from "./chunk-MSXMESFP.js";
+} from "./chunk-OBLMAUCF.js";
 import "./chunk-R7PZRSZ7.js";
 import "./chunk-TE7HPLA6.js";
 import {