zod-envkit 1.3.4 → 1.4.0

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+# [1.4.0](https://github.com/nxtxe/zod-envkit/compare/v1.3.5...v1.4.0) (2026-05-19)
+
+
+### Features
+
+* **cli:** add --production flag scaffold for check command ([01f3a02](https://github.com/nxtxe/zod-envkit/commit/01f3a02cfba0b991e3403968848818d73e570e0b))
+
+## [1.3.5](https://github.com/nxtxe/zod-envkit/compare/v1.3.4...v1.3.5) (2026-05-04)
+
+
+### Bug Fixes
+
+* **cli:** harden 1.3.5 stability checks and release hygiene ([74381b9](https://github.com/nxtxe/zod-envkit/commit/74381b97785a469bf5465d8839702f206acb4c2e))
+
 ## [1.3.4](https://github.com/nxtxe/zod-envkit/compare/v1.3.3...v1.3.4) (2026-04-20)
 
 

package/dist/{chunk-J4V5ODI6.js → chunk-WWWQDMV5.js}

@@ -196,7 +196,7 @@ var SECRET_PATTERNS = [
   (k) => k.includes("SESSION"),
   (k) => k.includes("CREDENTIAL"),
   (k) => k.includes("CREDS"),
-  (k) => k.includes("DATABASE_URL") || k === "DB_URL",
+  (k) => k.includes("DATABASE_URL") || k === "DB_URL" || k === "POSTGRES_URL" || k === "MYSQL_URL" || k === "DATABASE",
   (k) => k.includes("CONNECTION_STRING")
 ];
 function isSecretKey(key) {

package/dist/cli/index.cjs

@@ -46,7 +46,10 @@ var messages = {
     INVALID_FORMAT: "Invalid docs format",
     INVALID_MASK_MODE: "Invalid mask mode",
     INVALID_SORT: "Invalid sort mode",
+    INVALID_SCHEMA_MODE: "Invalid schema mode",
     INIT_INPUT_EMPTY: "Input env file is empty or not found:",
+    META_EMPTY_TIP_LINE_1: "Add at least one KEY=value line to .env.example,",
+    META_EMPTY_TIP_LINE_2: "or create env.meta.json and run: npx zod-envkit generate -c env.meta.json",
     SCHEMA_LOAD_FAILED: "Failed to load schema file:",
     SCHEMA_NOT_OBJECT: "Schema file must export a Zod object (z.object(...)).",
     SCHEMA_VARS_NOT_IN_META: "Schema variables not listed in env.meta.json:",
@@ -70,7 +73,10 @@ var messages = {
     INVALID_FORMAT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0444\u043E\u0440\u043C\u0430\u0442 \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u0438",
     INVALID_MASK_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u043C\u0430\u0441\u043A\u0438\u0440\u043E\u0432\u043A\u0438",
     INVALID_SORT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u0441\u043E\u0440\u0442\u0438\u0440\u043E\u0432\u043A\u0438",
+    INVALID_SCHEMA_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C schema",
     INIT_INPUT_EMPTY: "\u0424\u0430\u0439\u043B \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F \u043F\u0443\u0441\u0442 \u0438\u043B\u0438 \u043D\u0435 \u043D\u0430\u0439\u0434\u0435\u043D:",
+    META_EMPTY_TIP_LINE_1: "\u0414\u043E\u0431\u0430\u0432\u044C\u0442\u0435 \u0432 .env.example \u0445\u043E\u0442\u044F \u0431\u044B \u043E\u0434\u043D\u0443 \u0441\u0442\u0440\u043E\u043A\u0443 KEY=value,",
+    META_EMPTY_TIP_LINE_2: "\u0438\u043B\u0438 \u0441\u043E\u0437\u0434\u0430\u0439\u0442\u0435 env.meta.json \u0438 \u0432\u044B\u043F\u043E\u043B\u043D\u0438\u0442\u0435: npx zod-envkit generate -c env.meta.json",
     SCHEMA_LOAD_FAILED: "\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044C \u0444\u0430\u0439\u043B \u0441\u0445\u0435\u043C\u044B:",
     SCHEMA_NOT_OBJECT: "\u0424\u0430\u0439\u043B \u0441\u0445\u0435\u043C\u044B \u0434\u043E\u043B\u0436\u0435\u043D \u044D\u043A\u0441\u043F\u043E\u0440\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C Zod object (z.object(...)).",
     SCHEMA_VARS_NOT_IN_META: "\u041F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u0441\u0445\u0435\u043C\u044B \u043E\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044E\u0442 \u0432 env.meta.json:",
@@ -183,8 +189,8 @@ function loadMeta(lang, configFile) {
         `- ${examplePath}`,
         "",
         t(lang, "META_TIP"),
-        "  Add at least one KEY=value line to .env.example,",
-        "  or create env.meta.json and run: npx zod-envkit generate -c env.meta.json"
+        `  ${t(lang, "META_EMPTY_TIP_LINE_1")}`,
+        `  ${t(lang, "META_EMPTY_TIP_LINE_2")}`
       ]);
     }
     console.warn(`\u26A0\uFE0F ${t(lang, "META_FALLBACK_EXAMPLE")}`);
@@ -470,7 +476,7 @@ var SECRET_PATTERNS = [
   (k) => k.includes("SESSION"),
   (k) => k.includes("CREDENTIAL"),
   (k) => k.includes("CREDS"),
-  (k) => k.includes("DATABASE_URL") || k === "DB_URL",
+  (k) => k.includes("DATABASE_URL") || k === "DB_URL" || k === "POSTGRES_URL" || k === "MYSQL_URL" || k === "DATABASE",
   (k) => k.includes("CONNECTION_STRING")
 ];
 function isSecretKey(key) {
@@ -630,6 +636,9 @@ async function loadSchemaFile(filePath, lang) {
 // src/cli/commands/check.ts
 function registerCheck(program2, getLang2) {
   program2.command("check").description("Exit with code 1 if env is invalid (loads dotenv)").option("-c, --config <file>", "Path to env meta json", "env.meta.json").option("--dotenv <list>", "Comma-separated dotenv files (default: .env)", ".env").option("--strict", "Fail if unknown env vars are present (dotenv-only)").option(
+    "--production",
+    "Production guard: stricter deploy/CI checks (unknown dotenv keys, empty required, placeholders)"
+  ).option(
     "--schema <file>",
     "Path to JS file exporting Zod object; run schema\u2194meta consistency check"
   ).option(
@@ -638,6 +647,8 @@ function registerCheck(program2, getLang2) {
     "strict"
   ).action(async (opts) => {
     const lang = getLang2();
+    const production = Boolean(opts.production);
+    void production;
     const loaded = loadDotEnv(opts.dotenv);
     const { meta } = loadMeta(lang, opts.config);
     const sections = [];
@@ -661,7 +672,7 @@ function registerCheck(program2, getLang2) {
     if (opts.schema) {
       const schemaMode = String(opts.schemaMode ?? "strict").toLowerCase();
       if (schemaMode !== "warn" && schemaMode !== "strict") {
-        fail(lang, "INVALID_FORMAT", ["--schema-mode must be warn or strict"]);
+        fail(lang, "INVALID_SCHEMA_MODE", ["- warn | strict"]);
       }
       const { keys: schemaKeys } = await loadSchemaFile(opts.schema, lang);
       const metaKeys = new Set(Object.keys(meta));
@@ -672,7 +683,7 @@ function registerCheck(program2, getLang2) {
         const lines = [];
         if (inSchemaNotMeta.length) {
           lines.push(`\u274C ${t(lang, "SCHEMA_VARS_NOT_IN_META")}`);
-          inSchemaNotMeta.forEach((k) => lines.push(`- ${k}`));
+          inSchemaNotMeta.sort((a, b) => a.localeCompare(b)).forEach((k) => lines.push(`- ${k}`));
           lines.push(`   ${t(lang, "SCHEMA_HINT_ADD_TO_META")}`);
           lines.push("");
         }

package/dist/cli/index.js

@@ -5,7 +5,7 @@ import {
   getMissingEnv,
   getUnknownEnv,
   isSecretKey
-} from "../chunk-J4V5ODI6.js";
+} from "../chunk-WWWQDMV5.js";
 
 // src/cli/index.ts
 import { Command } from "commander";
@@ -30,7 +30,10 @@ var messages = {
     INVALID_FORMAT: "Invalid docs format",
     INVALID_MASK_MODE: "Invalid mask mode",
     INVALID_SORT: "Invalid sort mode",
+    INVALID_SCHEMA_MODE: "Invalid schema mode",
     INIT_INPUT_EMPTY: "Input env file is empty or not found:",
+    META_EMPTY_TIP_LINE_1: "Add at least one KEY=value line to .env.example,",
+    META_EMPTY_TIP_LINE_2: "or create env.meta.json and run: npx zod-envkit generate -c env.meta.json",
     SCHEMA_LOAD_FAILED: "Failed to load schema file:",
     SCHEMA_NOT_OBJECT: "Schema file must export a Zod object (z.object(...)).",
     SCHEMA_VARS_NOT_IN_META: "Schema variables not listed in env.meta.json:",
@@ -54,7 +57,10 @@ var messages = {
     INVALID_FORMAT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0444\u043E\u0440\u043C\u0430\u0442 \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u0438",
     INVALID_MASK_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u043C\u0430\u0441\u043A\u0438\u0440\u043E\u0432\u043A\u0438",
     INVALID_SORT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u0441\u043E\u0440\u0442\u0438\u0440\u043E\u0432\u043A\u0438",
+    INVALID_SCHEMA_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C schema",
     INIT_INPUT_EMPTY: "\u0424\u0430\u0439\u043B \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F \u043F\u0443\u0441\u0442 \u0438\u043B\u0438 \u043D\u0435 \u043D\u0430\u0439\u0434\u0435\u043D:",
+    META_EMPTY_TIP_LINE_1: "\u0414\u043E\u0431\u0430\u0432\u044C\u0442\u0435 \u0432 .env.example \u0445\u043E\u0442\u044F \u0431\u044B \u043E\u0434\u043D\u0443 \u0441\u0442\u0440\u043E\u043A\u0443 KEY=value,",
+    META_EMPTY_TIP_LINE_2: "\u0438\u043B\u0438 \u0441\u043E\u0437\u0434\u0430\u0439\u0442\u0435 env.meta.json \u0438 \u0432\u044B\u043F\u043E\u043B\u043D\u0438\u0442\u0435: npx zod-envkit generate -c env.meta.json",
     SCHEMA_LOAD_FAILED: "\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044C \u0444\u0430\u0439\u043B \u0441\u0445\u0435\u043C\u044B:",
     SCHEMA_NOT_OBJECT: "\u0424\u0430\u0439\u043B \u0441\u0445\u0435\u043C\u044B \u0434\u043E\u043B\u0436\u0435\u043D \u044D\u043A\u0441\u043F\u043E\u0440\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C Zod object (z.object(...)).",
     SCHEMA_VARS_NOT_IN_META: "\u041F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u0441\u0445\u0435\u043C\u044B \u043E\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044E\u0442 \u0432 env.meta.json:",
@@ -167,8 +173,8 @@ function loadMeta(lang, configFile) {
         `- ${examplePath}`,
         "",
         t(lang, "META_TIP"),
-        "  Add at least one KEY=value line to .env.example,",
-        "  or create env.meta.json and run: npx zod-envkit generate -c env.meta.json"
+        `  ${t(lang, "META_EMPTY_TIP_LINE_1")}`,
+        `  ${t(lang, "META_EMPTY_TIP_LINE_2")}`
       ]);
     }
     console.warn(`\u26A0\uFE0F ${t(lang, "META_FALLBACK_EXAMPLE")}`);
@@ -409,6 +415,9 @@ async function loadSchemaFile(filePath, lang) {
 // src/cli/commands/check.ts
 function registerCheck(program2, getLang2) {
   program2.command("check").description("Exit with code 1 if env is invalid (loads dotenv)").option("-c, --config <file>", "Path to env meta json", "env.meta.json").option("--dotenv <list>", "Comma-separated dotenv files (default: .env)", ".env").option("--strict", "Fail if unknown env vars are present (dotenv-only)").option(
+    "--production",
+    "Production guard: stricter deploy/CI checks (unknown dotenv keys, empty required, placeholders)"
+  ).option(
     "--schema <file>",
     "Path to JS file exporting Zod object; run schema\u2194meta consistency check"
   ).option(
@@ -417,6 +426,8 @@ function registerCheck(program2, getLang2) {
     "strict"
   ).action(async (opts) => {
     const lang = getLang2();
+    const production = Boolean(opts.production);
+    void production;
     const loaded = loadDotEnv(opts.dotenv);
     const { meta } = loadMeta(lang, opts.config);
     const sections = [];
@@ -440,7 +451,7 @@ function registerCheck(program2, getLang2) {
     if (opts.schema) {
       const schemaMode = String(opts.schemaMode ?? "strict").toLowerCase();
       if (schemaMode !== "warn" && schemaMode !== "strict") {
-        fail(lang, "INVALID_FORMAT", ["--schema-mode must be warn or strict"]);
+        fail(lang, "INVALID_SCHEMA_MODE", ["- warn | strict"]);
       }
       const { keys: schemaKeys } = await loadSchemaFile(opts.schema, lang);
       const metaKeys = new Set(Object.keys(meta));
@@ -451,7 +462,7 @@ function registerCheck(program2, getLang2) {
         const lines = [];
         if (inSchemaNotMeta.length) {
           lines.push(`\u274C ${t(lang, "SCHEMA_VARS_NOT_IN_META")}`);
-          inSchemaNotMeta.forEach((k) => lines.push(`- ${k}`));
+          inSchemaNotMeta.sort((a, b) => a.localeCompare(b)).forEach((k) => lines.push(`- ${k}`));
           lines.push(`   ${t(lang, "SCHEMA_HINT_ADD_TO_META")}`);
           lines.push("");
         }

package/dist/index.cjs

@@ -231,7 +231,7 @@ var SECRET_PATTERNS = [
   (k) => k.includes("SESSION"),
   (k) => k.includes("CREDENTIAL"),
   (k) => k.includes("CREDS"),
-  (k) => k.includes("DATABASE_URL") || k === "DB_URL",
+  (k) => k.includes("DATABASE_URL") || k === "DB_URL" || k === "POSTGRES_URL" || k === "MYSQL_URL" || k === "DATABASE",
   (k) => k.includes("CONNECTION_STRING")
 ];
 function isSecretKey(key) {

package/dist/index.js

@@ -6,7 +6,7 @@ import {
   getUnknownEnv,
   isSecretKey,
   sortMetaEntries
-} from "./chunk-J4V5ODI6.js";
+} from "./chunk-WWWQDMV5.js";
 
 // src/index.ts
 function loadEnv(schema, opts) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zod-envkit",
-  "version": "1.3.4",
+  "version": "1.4.0",
   "description": "Validate environment variables with Zod and generate .env.example",
   "license": "MIT",
   "author": "",
@@ -49,8 +49,9 @@
     "test:preprod:robust": "pnpm build && PREPROD_ITER=30 vitest run tests/test/preprod/30-robustness",
     "test:before-release": "pnpm build && pnpm test:preprod && pnpm test:preprod:robust",
     "ci:smoke": "pnpm build && node dist/cli/index.js --help",
+    "ci:release-hygiene": "node scripts/validate-release-state.cjs",
     "ci:docs": "pnpm docs:build",
-    "ci:all": "pnpm ci:smoke && pnpm test && pnpm ci:docs",
+    "ci:all": "pnpm ci:smoke && pnpm test && pnpm ci:release-hygiene && pnpm ci:docs",
     "prepublishOnly": "pnpm build && pnpm test",
     "docs:api": "typedoc --tsconfig tsconfig.docs.json --entryPoints src/index.ts",
     "docs:build": "pnpm docs:api && node scripts/copy-changelog-to-docs.cjs && vitepress build docs",