zod-envkit 1.3.3 → 1.3.5

package/CHANGELOG.md

@@ -1,9 +1,35 @@
-## [1.3.3](https://github.com/nxtxe/zod-envkit/compare/v1.3.2...v1.3.3) (2026-04-08)
+## [1.3.5](https://github.com/nxtxe/zod-envkit/compare/v1.3.4...v1.3.5) (2026-05-04)
 
 
 ### Bug Fixes
 
-* **cli:** lock output stability contract ([b65cca2](https://github.com/nxtxe/zod-envkit/commit/b65cca20de01563cf67f1cdac09ebde988834412))
+* **cli:** harden 1.3.5 stability checks and release hygiene ([74381b9](https://github.com/nxtxe/zod-envkit/commit/74381b97785a469bf5465d8839702f206acb4c2e))
+
+## [1.3.4](https://github.com/nxtxe/zod-envkit/compare/v1.3.3...v1.3.4) (2026-04-20)
+
+
+### Bug Fixes
+
+* **cli:** harden 1.3.4 output stability and edge robustness ([e3f52d7](https://github.com/nxtxe/zod-envkit/commit/e3f52d78917f726f08f7213fd31c00a52ca39deb))
+
+## [1.3.4](https://github.com/nxtxe/zod-envkit/compare/v1.3.3...v1.3.4) (2026-03-xx)
+
+
+### Bug Fixes
+
+* deterministic output polish:
+  * lock stable ordering and formatting of grouped `check --strict` errors across repeated runs
+* masking edge hardening:
+  * add coverage for short secret values (`1-2` chars) in `partial/full` modes
+  * keep case-insensitive secret detection stable (`Api_Key`, `my_password`)
+* dotenv parsing robustness:
+  * add coverage for BOM, trailing spaces, and duplicate keys with deterministic override behavior
+* fallback clarity hardening:
+  * extend tests for empty/comment-only `.env.example` fallback path
+* CLI smoke hardening:
+  * repeated `--help`, `--version`, `show`, and `check` invocations across locales
+* docs consistency patch:
+  * keep EN/RU CLI contract sections aligned (no behavior changes)
 
 ## [1.3.3](https://github.com/nxtxe/zod-envkit/compare/v1.3.2...v1.3.3) (2026-03-xx)
 

package/dist/{chunk-J4V5ODI6.js → chunk-WWWQDMV5.js}

@@ -196,7 +196,7 @@ var SECRET_PATTERNS = [
   (k) => k.includes("SESSION"),
   (k) => k.includes("CREDENTIAL"),
   (k) => k.includes("CREDS"),
-  (k) => k.includes("DATABASE_URL") || k === "DB_URL",
+  (k) => k.includes("DATABASE_URL") || k === "DB_URL" || k === "POSTGRES_URL" || k === "MYSQL_URL" || k === "DATABASE",
   (k) => k.includes("CONNECTION_STRING")
 ];
 function isSecretKey(key) {

package/dist/cli/index.cjs

@@ -46,7 +46,10 @@ var messages = {
     INVALID_FORMAT: "Invalid docs format",
     INVALID_MASK_MODE: "Invalid mask mode",
     INVALID_SORT: "Invalid sort mode",
+    INVALID_SCHEMA_MODE: "Invalid schema mode",
     INIT_INPUT_EMPTY: "Input env file is empty or not found:",
+    META_EMPTY_TIP_LINE_1: "Add at least one KEY=value line to .env.example,",
+    META_EMPTY_TIP_LINE_2: "or create env.meta.json and run: npx zod-envkit generate -c env.meta.json",
     SCHEMA_LOAD_FAILED: "Failed to load schema file:",
     SCHEMA_NOT_OBJECT: "Schema file must export a Zod object (z.object(...)).",
     SCHEMA_VARS_NOT_IN_META: "Schema variables not listed in env.meta.json:",
@@ -70,7 +73,10 @@ var messages = {
     INVALID_FORMAT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0444\u043E\u0440\u043C\u0430\u0442 \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u0438",
     INVALID_MASK_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u043C\u0430\u0441\u043A\u0438\u0440\u043E\u0432\u043A\u0438",
     INVALID_SORT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u0441\u043E\u0440\u0442\u0438\u0440\u043E\u0432\u043A\u0438",
+    INVALID_SCHEMA_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C schema",
     INIT_INPUT_EMPTY: "\u0424\u0430\u0439\u043B \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F \u043F\u0443\u0441\u0442 \u0438\u043B\u0438 \u043D\u0435 \u043D\u0430\u0439\u0434\u0435\u043D:",
+    META_EMPTY_TIP_LINE_1: "\u0414\u043E\u0431\u0430\u0432\u044C\u0442\u0435 \u0432 .env.example \u0445\u043E\u0442\u044F \u0431\u044B \u043E\u0434\u043D\u0443 \u0441\u0442\u0440\u043E\u043A\u0443 KEY=value,",
+    META_EMPTY_TIP_LINE_2: "\u0438\u043B\u0438 \u0441\u043E\u0437\u0434\u0430\u0439\u0442\u0435 env.meta.json \u0438 \u0432\u044B\u043F\u043E\u043B\u043D\u0438\u0442\u0435: npx zod-envkit generate -c env.meta.json",
     SCHEMA_LOAD_FAILED: "\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044C \u0444\u0430\u0439\u043B \u0441\u0445\u0435\u043C\u044B:",
     SCHEMA_NOT_OBJECT: "\u0424\u0430\u0439\u043B \u0441\u0445\u0435\u043C\u044B \u0434\u043E\u043B\u0436\u0435\u043D \u044D\u043A\u0441\u043F\u043E\u0440\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C Zod object (z.object(...)).",
     SCHEMA_VARS_NOT_IN_META: "\u041F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u0441\u0445\u0435\u043C\u044B \u043E\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044E\u0442 \u0432 env.meta.json:",
@@ -183,8 +189,8 @@ function loadMeta(lang, configFile) {
         `- ${examplePath}`,
         "",
         t(lang, "META_TIP"),
-        "  Add at least one KEY=value line to .env.example,",
-        "  or create env.meta.json and run: npx zod-envkit generate -c env.meta.json"
+        `  ${t(lang, "META_EMPTY_TIP_LINE_1")}`,
+        `  ${t(lang, "META_EMPTY_TIP_LINE_2")}`
       ]);
     }
     console.warn(`\u26A0\uFE0F ${t(lang, "META_FALLBACK_EXAMPLE")}`);
@@ -470,7 +476,7 @@ var SECRET_PATTERNS = [
   (k) => k.includes("SESSION"),
   (k) => k.includes("CREDENTIAL"),
   (k) => k.includes("CREDS"),
-  (k) => k.includes("DATABASE_URL") || k === "DB_URL",
+  (k) => k.includes("DATABASE_URL") || k === "DB_URL" || k === "POSTGRES_URL" || k === "MYSQL_URL" || k === "DATABASE",
   (k) => k.includes("CONNECTION_STRING")
 ];
 function isSecretKey(key) {
@@ -661,7 +667,7 @@ function registerCheck(program2, getLang2) {
     if (opts.schema) {
       const schemaMode = String(opts.schemaMode ?? "strict").toLowerCase();
       if (schemaMode !== "warn" && schemaMode !== "strict") {
-        fail(lang, "INVALID_FORMAT", ["--schema-mode must be warn or strict"]);
+        fail(lang, "INVALID_SCHEMA_MODE", ["- warn | strict"]);
       }
       const { keys: schemaKeys } = await loadSchemaFile(opts.schema, lang);
       const metaKeys = new Set(Object.keys(meta));
@@ -672,7 +678,7 @@ function registerCheck(program2, getLang2) {
         const lines = [];
         if (inSchemaNotMeta.length) {
           lines.push(`\u274C ${t(lang, "SCHEMA_VARS_NOT_IN_META")}`);
-          inSchemaNotMeta.forEach((k) => lines.push(`- ${k}`));
+          inSchemaNotMeta.sort((a, b) => a.localeCompare(b)).forEach((k) => lines.push(`- ${k}`));
           lines.push(`   ${t(lang, "SCHEMA_HINT_ADD_TO_META")}`);
           lines.push("");
         }
@@ -745,8 +751,10 @@ injectDefaultCommandIfMissing(process.argv, {
     "show",
     "check",
     "init",
+    "help",
     "-h",
     "--help",
+    "--all",
     "-V",
     "--version",
     "--lang"
@@ -771,4 +779,98 @@ registerGenerate(program, getLang);
 registerShow(program, getLang);
 registerCheck(program, getLang);
 registerInit(program, getLang);
+function resolveCliLangArg(argv) {
+  for (let i = 0; i < argv.length; i++) {
+    const token = argv[i] ?? "";
+    if (token === "--lang") return argv[i + 1];
+    if (token.startsWith("--lang=")) return token.slice("--lang=".length);
+  }
+  return void 0;
+}
+function renderDeepHelp(lang) {
+  const commandNames = program.commands.map((cmd) => cmd.name()).join(", ");
+  const blocks = lang === "ru" ? [
+    "=== zod-envkit \u043F\u043E\u0434\u0440\u043E\u0431\u043D\u0430\u044F \u0441\u043F\u0440\u0430\u0432\u043A\u0430 ===",
+    "",
+    "\u0411\u0430\u0437\u043E\u0432\u0430\u044F \u0438\u0434\u0435\u044F:",
+    "  env.meta.json \u2014 \u0438\u0441\u0442\u043E\u0447\u043D\u0438\u043A \u043F\u0440\u0430\u0432\u0434\u044B \u0434\u043B\u044F \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u0438, \u043F\u0440\u043E\u0432\u0435\u0440\u043E\u043A \u0438 \u043E\u043D\u0431\u043E\u0440\u0434\u0438\u043D\u0433\u0430.",
+    "",
+    "\u0411\u044B\u0441\u0442\u0440\u044B\u0439 \u0441\u0442\u0430\u0440\u0442:",
+    "  1) npx zod-envkit init",
+    "  2) npx zod-envkit generate",
+    "  3) npx zod-envkit show",
+    "  4) npx zod-envkit check --strict",
+    "",
+    "\u0414\u043E\u0441\u0442\u0443\u043F\u043D\u044B\u0435 \u043A\u043E\u043C\u0430\u043D\u0434\u044B:",
+    `  ${commandNames}`,
+    "",
+    "\u0420\u0435\u043A\u043E\u043C\u0435\u043D\u0434\u0443\u0435\u043C\u044B\u0435 workflow:",
+    "  - \u0441\u0442\u0430\u0440\u0442 \u0438\u0437 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044E\u0449\u0435\u0433\u043E env example:",
+    "      npx zod-envkit init --input .env.example --output env.meta.json",
+    "  - \u0434\u0435\u0442\u0435\u0440\u043C\u0438\u043D\u0438\u0440\u043E\u0432\u0430\u043D\u043D\u0430\u044F \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u044F \u0432 CI:",
+    "      npx zod-envkit generate --format md --sort required-first",
+    "      npx zod-envkit check --strict --dotenv .env,.env.local",
+    "  - \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0430 \u043A\u043E\u043D\u0442\u0440\u0430\u043A\u0442\u0430 schema \u2194 meta:",
+    "      npx zod-envkit check --schema ./schema/env.mjs --schema-mode strict",
+    "",
+    "\u0414\u0435\u0442\u0430\u043B\u044C\u043D\u0430\u044F \u0441\u043F\u0440\u0430\u0432\u043A\u0430 \u043F\u043E \u043A\u043E\u043C\u0430\u043D\u0434\u0430\u043C:",
+    ""
+  ] : [
+    "=== zod-envkit deep help ===",
+    "",
+    "Core idea:",
+    "  env.meta.json is the source of truth for docs, checks and onboarding.",
+    "",
+    "Quick start:",
+    "  1) npx zod-envkit init",
+    "  2) npx zod-envkit generate",
+    "  3) npx zod-envkit show",
+    "  4) npx zod-envkit check --strict",
+    "",
+    "Available commands:",
+    `  ${commandNames}`,
+    "",
+    "Recommended workflows:",
+    "  - bootstrap from existing env example:",
+    "      npx zod-envkit init --input .env.example --output env.meta.json",
+    "  - keep docs deterministic in CI:",
+    "      npx zod-envkit generate --format md --sort required-first",
+    "      npx zod-envkit check --strict --dotenv .env,.env.local",
+    "  - validate schema contract against meta:",
+    "      npx zod-envkit check --schema ./schema/env.mjs --schema-mode strict",
+    "",
+    "Detailed command reference:",
+    ""
+  ];
+  for (const cmd of program.commands) {
+    blocks.push(cmd.helpInformation().trim(), "");
+  }
+  if (lang === "ru") {
+    blocks.push(
+      "\u041F\u043E\u0434\u0441\u043A\u0430\u0437\u043A\u0438:",
+      "  - \u044F\u0437\u044B\u043A CLI: --lang en|ru",
+      "  - \u0441\u043F\u0440\u0430\u0432\u043A\u0430 \u043F\u043E \u043A\u043E\u043C\u0430\u043D\u0434\u0435: npx zod-envkit help <command>",
+      "  - \u043F\u043E\u043B\u043D\u044B\u0439 \u0433\u0430\u0439\u0434: npx zod-envkit help --all"
+    );
+  } else {
+    blocks.push(
+      "Tips:",
+      "  - global language: --lang en|ru",
+      "  - command help: npx zod-envkit help <command>",
+      "  - full handbook: npx zod-envkit help --all"
+    );
+  }
+  return `${blocks.join("\n").trimEnd()}
+`;
+}
+program.addHelpText("after", () => {
+  const lang = resolveLang(resolveCliLangArg(process.argv.slice(2)));
+  return lang === "ru" ? "\n\u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u043E: `npx zod-envkit help --all` \u0432\u044B\u0432\u043E\u0434\u0438\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043D\u043D\u0443\u044E \u0441\u043F\u0440\u0430\u0432\u043A\u0443 \u0441 workflow \u0438 \u043F\u043E\u043B\u043D\u043E\u0439 \u0441\u0432\u043E\u0434\u043A\u043E\u0439 \u043A\u043E\u043C\u0430\u043D\u0434.\n" : "\nTip: `npx zod-envkit help --all` prints an extended handbook with workflows and full command reference.\n";
+});
+var cliArgs = process.argv.slice(2);
+if (cliArgs[0] === "help" && cliArgs.includes("--all")) {
+  const lang = resolveLang(resolveCliLangArg(cliArgs));
+  process.stdout.write(renderDeepHelp(lang));
+  process.exit(0);
+}
 program.parse(process.argv);

package/dist/cli/index.js

@@ -5,7 +5,7 @@ import {
   getMissingEnv,
   getUnknownEnv,
   isSecretKey
-} from "../chunk-J4V5ODI6.js";
+} from "../chunk-WWWQDMV5.js";
 
 // src/cli/index.ts
 import { Command } from "commander";
@@ -30,7 +30,10 @@ var messages = {
     INVALID_FORMAT: "Invalid docs format",
     INVALID_MASK_MODE: "Invalid mask mode",
     INVALID_SORT: "Invalid sort mode",
+    INVALID_SCHEMA_MODE: "Invalid schema mode",
     INIT_INPUT_EMPTY: "Input env file is empty or not found:",
+    META_EMPTY_TIP_LINE_1: "Add at least one KEY=value line to .env.example,",
+    META_EMPTY_TIP_LINE_2: "or create env.meta.json and run: npx zod-envkit generate -c env.meta.json",
     SCHEMA_LOAD_FAILED: "Failed to load schema file:",
     SCHEMA_NOT_OBJECT: "Schema file must export a Zod object (z.object(...)).",
     SCHEMA_VARS_NOT_IN_META: "Schema variables not listed in env.meta.json:",
@@ -54,7 +57,10 @@ var messages = {
     INVALID_FORMAT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0444\u043E\u0440\u043C\u0430\u0442 \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u0438",
     INVALID_MASK_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u043C\u0430\u0441\u043A\u0438\u0440\u043E\u0432\u043A\u0438",
     INVALID_SORT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u0441\u043E\u0440\u0442\u0438\u0440\u043E\u0432\u043A\u0438",
+    INVALID_SCHEMA_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C schema",
     INIT_INPUT_EMPTY: "\u0424\u0430\u0439\u043B \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F \u043F\u0443\u0441\u0442 \u0438\u043B\u0438 \u043D\u0435 \u043D\u0430\u0439\u0434\u0435\u043D:",
+    META_EMPTY_TIP_LINE_1: "\u0414\u043E\u0431\u0430\u0432\u044C\u0442\u0435 \u0432 .env.example \u0445\u043E\u0442\u044F \u0431\u044B \u043E\u0434\u043D\u0443 \u0441\u0442\u0440\u043E\u043A\u0443 KEY=value,",
+    META_EMPTY_TIP_LINE_2: "\u0438\u043B\u0438 \u0441\u043E\u0437\u0434\u0430\u0439\u0442\u0435 env.meta.json \u0438 \u0432\u044B\u043F\u043E\u043B\u043D\u0438\u0442\u0435: npx zod-envkit generate -c env.meta.json",
     SCHEMA_LOAD_FAILED: "\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044C \u0444\u0430\u0439\u043B \u0441\u0445\u0435\u043C\u044B:",
     SCHEMA_NOT_OBJECT: "\u0424\u0430\u0439\u043B \u0441\u0445\u0435\u043C\u044B \u0434\u043E\u043B\u0436\u0435\u043D \u044D\u043A\u0441\u043F\u043E\u0440\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C Zod object (z.object(...)).",
     SCHEMA_VARS_NOT_IN_META: "\u041F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u0441\u0445\u0435\u043C\u044B \u043E\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044E\u0442 \u0432 env.meta.json:",
@@ -167,8 +173,8 @@ function loadMeta(lang, configFile) {
         `- ${examplePath}`,
         "",
         t(lang, "META_TIP"),
-        "  Add at least one KEY=value line to .env.example,",
-        "  or create env.meta.json and run: npx zod-envkit generate -c env.meta.json"
+        `  ${t(lang, "META_EMPTY_TIP_LINE_1")}`,
+        `  ${t(lang, "META_EMPTY_TIP_LINE_2")}`
       ]);
     }
     console.warn(`\u26A0\uFE0F ${t(lang, "META_FALLBACK_EXAMPLE")}`);
@@ -440,7 +446,7 @@ function registerCheck(program2, getLang2) {
     if (opts.schema) {
       const schemaMode = String(opts.schemaMode ?? "strict").toLowerCase();
       if (schemaMode !== "warn" && schemaMode !== "strict") {
-        fail(lang, "INVALID_FORMAT", ["--schema-mode must be warn or strict"]);
+        fail(lang, "INVALID_SCHEMA_MODE", ["- warn | strict"]);
       }
       const { keys: schemaKeys } = await loadSchemaFile(opts.schema, lang);
       const metaKeys = new Set(Object.keys(meta));
@@ -451,7 +457,7 @@ function registerCheck(program2, getLang2) {
         const lines = [];
         if (inSchemaNotMeta.length) {
           lines.push(`\u274C ${t(lang, "SCHEMA_VARS_NOT_IN_META")}`);
-          inSchemaNotMeta.forEach((k) => lines.push(`- ${k}`));
+          inSchemaNotMeta.sort((a, b) => a.localeCompare(b)).forEach((k) => lines.push(`- ${k}`));
           lines.push(`   ${t(lang, "SCHEMA_HINT_ADD_TO_META")}`);
           lines.push("");
         }
@@ -524,8 +530,10 @@ injectDefaultCommandIfMissing(process.argv, {
     "show",
     "check",
     "init",
+    "help",
     "-h",
     "--help",
+    "--all",
     "-V",
     "--version",
     "--lang"
@@ -550,4 +558,98 @@ registerGenerate(program, getLang);
 registerShow(program, getLang);
 registerCheck(program, getLang);
 registerInit(program, getLang);
+function resolveCliLangArg(argv) {
+  for (let i = 0; i < argv.length; i++) {
+    const token = argv[i] ?? "";
+    if (token === "--lang") return argv[i + 1];
+    if (token.startsWith("--lang=")) return token.slice("--lang=".length);
+  }
+  return void 0;
+}
+function renderDeepHelp(lang) {
+  const commandNames = program.commands.map((cmd) => cmd.name()).join(", ");
+  const blocks = lang === "ru" ? [
+    "=== zod-envkit \u043F\u043E\u0434\u0440\u043E\u0431\u043D\u0430\u044F \u0441\u043F\u0440\u0430\u0432\u043A\u0430 ===",
+    "",
+    "\u0411\u0430\u0437\u043E\u0432\u0430\u044F \u0438\u0434\u0435\u044F:",
+    "  env.meta.json \u2014 \u0438\u0441\u0442\u043E\u0447\u043D\u0438\u043A \u043F\u0440\u0430\u0432\u0434\u044B \u0434\u043B\u044F \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u0438, \u043F\u0440\u043E\u0432\u0435\u0440\u043E\u043A \u0438 \u043E\u043D\u0431\u043E\u0440\u0434\u0438\u043D\u0433\u0430.",
+    "",
+    "\u0411\u044B\u0441\u0442\u0440\u044B\u0439 \u0441\u0442\u0430\u0440\u0442:",
+    "  1) npx zod-envkit init",
+    "  2) npx zod-envkit generate",
+    "  3) npx zod-envkit show",
+    "  4) npx zod-envkit check --strict",
+    "",
+    "\u0414\u043E\u0441\u0442\u0443\u043F\u043D\u044B\u0435 \u043A\u043E\u043C\u0430\u043D\u0434\u044B:",
+    `  ${commandNames}`,
+    "",
+    "\u0420\u0435\u043A\u043E\u043C\u0435\u043D\u0434\u0443\u0435\u043C\u044B\u0435 workflow:",
+    "  - \u0441\u0442\u0430\u0440\u0442 \u0438\u0437 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044E\u0449\u0435\u0433\u043E env example:",
+    "      npx zod-envkit init --input .env.example --output env.meta.json",
+    "  - \u0434\u0435\u0442\u0435\u0440\u043C\u0438\u043D\u0438\u0440\u043E\u0432\u0430\u043D\u043D\u0430\u044F \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u044F \u0432 CI:",
+    "      npx zod-envkit generate --format md --sort required-first",
+    "      npx zod-envkit check --strict --dotenv .env,.env.local",
+    "  - \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0430 \u043A\u043E\u043D\u0442\u0440\u0430\u043A\u0442\u0430 schema \u2194 meta:",
+    "      npx zod-envkit check --schema ./schema/env.mjs --schema-mode strict",
+    "",
+    "\u0414\u0435\u0442\u0430\u043B\u044C\u043D\u0430\u044F \u0441\u043F\u0440\u0430\u0432\u043A\u0430 \u043F\u043E \u043A\u043E\u043C\u0430\u043D\u0434\u0430\u043C:",
+    ""
+  ] : [
+    "=== zod-envkit deep help ===",
+    "",
+    "Core idea:",
+    "  env.meta.json is the source of truth for docs, checks and onboarding.",
+    "",
+    "Quick start:",
+    "  1) npx zod-envkit init",
+    "  2) npx zod-envkit generate",
+    "  3) npx zod-envkit show",
+    "  4) npx zod-envkit check --strict",
+    "",
+    "Available commands:",
+    `  ${commandNames}`,
+    "",
+    "Recommended workflows:",
+    "  - bootstrap from existing env example:",
+    "      npx zod-envkit init --input .env.example --output env.meta.json",
+    "  - keep docs deterministic in CI:",
+    "      npx zod-envkit generate --format md --sort required-first",
+    "      npx zod-envkit check --strict --dotenv .env,.env.local",
+    "  - validate schema contract against meta:",
+    "      npx zod-envkit check --schema ./schema/env.mjs --schema-mode strict",
+    "",
+    "Detailed command reference:",
+    ""
+  ];
+  for (const cmd of program.commands) {
+    blocks.push(cmd.helpInformation().trim(), "");
+  }
+  if (lang === "ru") {
+    blocks.push(
+      "\u041F\u043E\u0434\u0441\u043A\u0430\u0437\u043A\u0438:",
+      "  - \u044F\u0437\u044B\u043A CLI: --lang en|ru",
+      "  - \u0441\u043F\u0440\u0430\u0432\u043A\u0430 \u043F\u043E \u043A\u043E\u043C\u0430\u043D\u0434\u0435: npx zod-envkit help <command>",
+      "  - \u043F\u043E\u043B\u043D\u044B\u0439 \u0433\u0430\u0439\u0434: npx zod-envkit help --all"
+    );
+  } else {
+    blocks.push(
+      "Tips:",
+      "  - global language: --lang en|ru",
+      "  - command help: npx zod-envkit help <command>",
+      "  - full handbook: npx zod-envkit help --all"
+    );
+  }
+  return `${blocks.join("\n").trimEnd()}
+`;
+}
+program.addHelpText("after", () => {
+  const lang = resolveLang(resolveCliLangArg(process.argv.slice(2)));
+  return lang === "ru" ? "\n\u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u043E: `npx zod-envkit help --all` \u0432\u044B\u0432\u043E\u0434\u0438\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043D\u043D\u0443\u044E \u0441\u043F\u0440\u0430\u0432\u043A\u0443 \u0441 workflow \u0438 \u043F\u043E\u043B\u043D\u043E\u0439 \u0441\u0432\u043E\u0434\u043A\u043E\u0439 \u043A\u043E\u043C\u0430\u043D\u0434.\n" : "\nTip: `npx zod-envkit help --all` prints an extended handbook with workflows and full command reference.\n";
+});
+var cliArgs = process.argv.slice(2);
+if (cliArgs[0] === "help" && cliArgs.includes("--all")) {
+  const lang = resolveLang(resolveCliLangArg(cliArgs));
+  process.stdout.write(renderDeepHelp(lang));
+  process.exit(0);
+}
 program.parse(process.argv);

package/dist/index.cjs

@@ -231,7 +231,7 @@ var SECRET_PATTERNS = [
   (k) => k.includes("SESSION"),
   (k) => k.includes("CREDENTIAL"),
   (k) => k.includes("CREDS"),
-  (k) => k.includes("DATABASE_URL") || k === "DB_URL",
+  (k) => k.includes("DATABASE_URL") || k === "DB_URL" || k === "POSTGRES_URL" || k === "MYSQL_URL" || k === "DATABASE",
   (k) => k.includes("CONNECTION_STRING")
 ];
 function isSecretKey(key) {

package/dist/index.js

@@ -6,7 +6,7 @@ import {
   getUnknownEnv,
   isSecretKey,
   sortMetaEntries
-} from "./chunk-J4V5ODI6.js";
+} from "./chunk-WWWQDMV5.js";
 
 // src/index.ts
 function loadEnv(schema, opts) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zod-envkit",
-  "version": "1.3.3",
+  "version": "1.3.5",
   "description": "Validate environment variables with Zod and generate .env.example",
   "license": "MIT",
   "author": "",
@@ -49,8 +49,9 @@
     "test:preprod:robust": "pnpm build && PREPROD_ITER=30 vitest run tests/test/preprod/30-robustness",
     "test:before-release": "pnpm build && pnpm test:preprod && pnpm test:preprod:robust",
     "ci:smoke": "pnpm build && node dist/cli/index.js --help",
+    "ci:release-hygiene": "node scripts/validate-release-state.cjs",
     "ci:docs": "pnpm docs:build",
-    "ci:all": "pnpm ci:smoke && pnpm test && pnpm ci:docs",
+    "ci:all": "pnpm ci:smoke && pnpm test && pnpm ci:release-hygiene && pnpm ci:docs",
     "prepublishOnly": "pnpm build && pnpm test",
     "docs:api": "typedoc --tsconfig tsconfig.docs.json --entryPoints src/index.ts",
     "docs:build": "pnpm docs:api && node scripts/copy-changelog-to-docs.cjs && vitepress build docs",