zod-envkit 1.3.5 → 1.5.0

package/CHANGELOG.md

@@ -1,3 +1,23 @@
+# [1.5.0](https://github.com/nxtxe/zod-envkit/compare/v1.4.0...v1.5.0) (2026-06-06)
+
+
+### Bug Fixes
+
+* **ci:** use npm trusted publishing for semantic-release ([2f05e0b](https://github.com/nxtxe/zod-envkit/commit/2f05e0b9e45c385160bcc42bafbc70db6078b52f))
+* **release:** accept semantic-release changelog heading in hygiene check ([e40a655](https://github.com/nxtxe/zod-envkit/commit/e40a655270798157a2afc4388f9a490576efd12b))
+
+
+### Features
+
+* **cli:** fail on unknown dotenv keys in check --production mode ([ff52897](https://github.com/nxtxe/zod-envkit/commit/ff528978966982d0f59530b170d712efb86c09e6))
+
+# [1.4.0](https://github.com/nxtxe/zod-envkit/compare/v1.3.5...v1.4.0) (2026-05-19)
+
+
+### Features
+
+* **cli:** add --production flag scaffold for check command ([01f3a02](https://github.com/nxtxe/zod-envkit/commit/01f3a02cfba0b991e3403968848818d73e570e0b))
+
 ## [1.3.5](https://github.com/nxtxe/zod-envkit/compare/v1.3.4...v1.3.5) (2026-05-04)
 
 

package/README.RU.md

@@ -233,8 +233,15 @@ npx zod-envkit check
 npx zod-envkit check --strict
 ```
 
+Production guard (более строгие проверки для deploy/CI; неизвестные ключи из dotenv — как в `--strict`):
+
+```bash
+npx zod-envkit check --production
+```
+
 - завершает процесс с кодом `1`, если отсутствуют обязательные переменные
-- в `--strict` режиме также падает при наличии неизвестных переменных
+- в `--strict` режиме также падает при неизвестных переменных (только ключи из dotenv)
+- с `--production` также падает при неизвестных переменных из dotenv (тот же dotenv-only scope, что у `--strict`)
 
 ---
 

package/README.md

@@ -230,8 +230,15 @@ Strict mode (fail on unknown variables):
 npx zod-envkit check --strict
 ```
 
+Production guard (stricter deploy/CI checks; unknown dotenv keys fail like `--strict`):
+
+```bash
+npx zod-envkit check --production
+```
+
 * exits with code `1` if required variables are missing
-* in `--strict` mode also fails on unknown variables
+* in `--strict` mode also fails on unknown variables (dotenv-loaded keys only)
+* with `--production` also fails on unknown dotenv variables (same dotenv-only scope as `--strict`)
 
 ---
 

package/dist/cli/index.cjs

@@ -636,6 +636,9 @@ async function loadSchemaFile(filePath, lang) {
 // src/cli/commands/check.ts
 function registerCheck(program2, getLang2) {
   program2.command("check").description("Exit with code 1 if env is invalid (loads dotenv)").option("-c, --config <file>", "Path to env meta json", "env.meta.json").option("--dotenv <list>", "Comma-separated dotenv files (default: .env)", ".env").option("--strict", "Fail if unknown env vars are present (dotenv-only)").option(
+    "--production",
+    "Production guard: stricter deploy/CI checks (unknown dotenv keys, empty required, placeholders)"
+  ).option(
     "--schema <file>",
     "Path to JS file exporting Zod object; run schema\u2194meta consistency check"
   ).option(
@@ -644,6 +647,8 @@ function registerCheck(program2, getLang2) {
     "strict"
   ).action(async (opts) => {
     const lang = getLang2();
+    const production = Boolean(opts.production);
+    const strictEffective = Boolean(opts.strict) || production;
     const loaded = loadDotEnv(opts.dotenv);
     const { meta } = loadMeta(lang, opts.config);
     const sections = [];
@@ -653,7 +658,7 @@ function registerCheck(program2, getLang2) {
       missing.forEach((k) => sections.push(`- ${k}`));
       sections.push("");
     }
-    if (opts.strict) {
+    if (strictEffective) {
       const unknown = getUnknownEnv(meta, loaded.env);
       if (unknown.length) {
         sections.push(t(lang, "UNKNOWN_ENV"));

package/dist/cli/index.js

@@ -415,6 +415,9 @@ async function loadSchemaFile(filePath, lang) {
 // src/cli/commands/check.ts
 function registerCheck(program2, getLang2) {
   program2.command("check").description("Exit with code 1 if env is invalid (loads dotenv)").option("-c, --config <file>", "Path to env meta json", "env.meta.json").option("--dotenv <list>", "Comma-separated dotenv files (default: .env)", ".env").option("--strict", "Fail if unknown env vars are present (dotenv-only)").option(
+    "--production",
+    "Production guard: stricter deploy/CI checks (unknown dotenv keys, empty required, placeholders)"
+  ).option(
     "--schema <file>",
     "Path to JS file exporting Zod object; run schema\u2194meta consistency check"
   ).option(
@@ -423,6 +426,8 @@ function registerCheck(program2, getLang2) {
     "strict"
   ).action(async (opts) => {
     const lang = getLang2();
+    const production = Boolean(opts.production);
+    const strictEffective = Boolean(opts.strict) || production;
     const loaded = loadDotEnv(opts.dotenv);
     const { meta } = loadMeta(lang, opts.config);
     const sections = [];
@@ -432,7 +437,7 @@ function registerCheck(program2, getLang2) {
       missing.forEach((k) => sections.push(`- ${k}`));
       sections.push("");
     }
-    if (opts.strict) {
+    if (strictEffective) {
       const unknown = getUnknownEnv(meta, loaded.env);
       if (unknown.length) {
         sections.push(t(lang, "UNKNOWN_ENV"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zod-envkit",
-  "version": "1.3.5",
+  "version": "1.5.0",
   "description": "Validate environment variables with Zod and generate .env.example",
   "license": "MIT",
   "author": "",