zod-envkit 1.4.0 → 1.5.1

package/CHANGELOG.md

@@ -1,3 +1,23 @@
+## [1.5.1](https://github.com/nxtxe/zod-envkit/compare/v1.5.0...v1.5.1) (2026-06-27)
+
+
+### Bug Fixes
+
+* **cli:** fail on empty required dotenv values in check --production ([0c46748](https://github.com/nxtxe/zod-envkit/commit/0c46748e4740c97d7fde7bb1a39b7dd4bb11109e))
+
+# [1.5.0](https://github.com/nxtxe/zod-envkit/compare/v1.4.0...v1.5.0) (2026-06-06)
+
+
+### Bug Fixes
+
+* **ci:** use npm trusted publishing for semantic-release ([2f05e0b](https://github.com/nxtxe/zod-envkit/commit/2f05e0b9e45c385160bcc42bafbc70db6078b52f))
+* **release:** accept semantic-release changelog heading in hygiene check ([e40a655](https://github.com/nxtxe/zod-envkit/commit/e40a655270798157a2afc4388f9a490576efd12b))
+
+
+### Features
+
+* **cli:** fail on unknown dotenv keys in check --production mode ([ff52897](https://github.com/nxtxe/zod-envkit/commit/ff528978966982d0f59530b170d712efb86c09e6))
+
 # [1.4.0](https://github.com/nxtxe/zod-envkit/compare/v1.3.5...v1.4.0) (2026-05-19)
 
 

package/README.RU.md

@@ -233,8 +233,16 @@ npx zod-envkit check
 npx zod-envkit check --strict
 ```
 
+Production guard (более строгие проверки для deploy/CI; неизвестные ключи из dotenv — как в `--strict`):
+
+```bash
+npx zod-envkit check --production
+```
+
 - завершает процесс с кодом `1`, если отсутствуют обязательные переменные
-- в `--strict` режиме также падает при наличии неизвестных переменных
+- в `--strict` режиме также падает при неизвестных переменных (только ключи из dotenv)
+- с `--production` также падает при неизвестных переменных из dotenv (тот же dotenv-only scope, что у `--strict`)
+- с `--production` также падает, если обязательный ключ есть в dotenv, но пустой после trim (`PORT=`, `PORT="   "`)
 
 ---
 

package/README.md

@@ -230,8 +230,16 @@ Strict mode (fail on unknown variables):
 npx zod-envkit check --strict
 ```
 
+Production guard (stricter deploy/CI checks; unknown dotenv keys fail like `--strict`):
+
+```bash
+npx zod-envkit check --production
+```
+
 * exits with code `1` if required variables are missing
-* in `--strict` mode also fails on unknown variables
+* in `--strict` mode also fails on unknown variables (dotenv-loaded keys only)
+* with `--production` also fails on unknown dotenv variables (same dotenv-only scope as `--strict`)
+* with `--production` also fails when a required dotenv key is present but empty after trim (`PORT=`, `PORT="   "`)
 
 ---
 

package/dist/{chunk-WWWQDMV5.js → chunk-AGSAWBDX.js}

@@ -172,6 +172,17 @@ function getMissingEnv(meta, env = process.env) {
   }
   return missing;
 }
+function getEmptyRequiredEnv(meta, env) {
+  const empty = [];
+  for (const [key, m] of Object.entries(meta)) {
+    const required = m.required !== false;
+    if (!required) continue;
+    if (!Object.prototype.hasOwnProperty.call(env, key)) continue;
+    if (env[key].trim() === "") empty.push(key);
+  }
+  empty.sort((a, b) => a.localeCompare(b));
+  return empty;
+}
 function getUnknownEnv(meta, env = process.env) {
   const known = new Set(Object.keys(meta));
   const unknown = [];
@@ -213,6 +224,7 @@ export {
   generateEnvExample,
   generateEnvDocs,
   getMissingEnv,
+  getEmptyRequiredEnv,
   getUnknownEnv,
   isSecretKey,
   checkEnv

package/dist/cli/index.cjs

@@ -42,6 +42,7 @@ var messages = {
     GENERATED: "Generated: {example}, {docs}",
     ENV_OK: "Environment looks good.",
     MISSING_ENV: "Missing required environment variables:",
+    EMPTY_REQUIRED_ENV: "Required environment variables are empty (production; dotenv-loaded keys):",
     UNKNOWN_ENV: "Unknown environment variables (strict mode; only dotenv-loaded keys):",
     INVALID_FORMAT: "Invalid docs format",
     INVALID_MASK_MODE: "Invalid mask mode",
@@ -69,6 +70,7 @@ var messages = {
     GENERATED: "\u0421\u0433\u0435\u043D\u0435\u0440\u0438\u0440\u043E\u0432\u0430\u043D\u043E: {example}, {docs}",
     ENV_OK: "\u041F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F \u0432 \u043F\u043E\u0440\u044F\u0434\u043A\u0435.",
     MISSING_ENV: "\u041E\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044E\u0442 \u043E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u044B\u0435 \u043F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F:",
+    EMPTY_REQUIRED_ENV: "\u041E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u044B\u0435 \u043F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F \u043F\u0443\u0441\u0442\u044B\u0435 (production; \u0442\u043E\u043B\u044C\u043A\u043E \u0438\u0437 dotenv-\u0444\u0430\u0439\u043B\u043E\u0432):",
     UNKNOWN_ENV: "\u041E\u0431\u043D\u0430\u0440\u0443\u0436\u0435\u043D\u044B \u043D\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043D\u044B\u0435 \u043F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F (strict; \u0442\u043E\u043B\u044C\u043A\u043E \u0438\u0437 dotenv-\u0444\u0430\u0439\u043B\u043E\u0432):",
     INVALID_FORMAT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0444\u043E\u0440\u043C\u0430\u0442 \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u0438",
     INVALID_MASK_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u043C\u0430\u0441\u043A\u0438\u0440\u043E\u0432\u043A\u0438",
@@ -452,6 +454,17 @@ function getMissingEnv(meta, env = process.env) {
   }
   return missing;
 }
+function getEmptyRequiredEnv(meta, env) {
+  const empty = [];
+  for (const [key, m] of Object.entries(meta)) {
+    const required = m.required !== false;
+    if (!required) continue;
+    if (!Object.prototype.hasOwnProperty.call(env, key)) continue;
+    if (env[key].trim() === "") empty.push(key);
+  }
+  empty.sort((a, b) => a.localeCompare(b));
+  return empty;
+}
 function getUnknownEnv(meta, env = process.env) {
   const known = new Set(Object.keys(meta));
   const unknown = [];
@@ -648,17 +661,26 @@ function registerCheck(program2, getLang2) {
   ).action(async (opts) => {
     const lang = getLang2();
     const production = Boolean(opts.production);
-    void production;
+    const strictEffective = Boolean(opts.strict) || production;
     const loaded = loadDotEnv(opts.dotenv);
     const { meta } = loadMeta(lang, opts.config);
     const sections = [];
-    const missing = getMissingEnv(meta, process.env);
+    const emptyRequired = production ? getEmptyRequiredEnv(meta, loaded.env) : [];
+    const emptyRequiredSet = new Set(emptyRequired);
+    const missing = getMissingEnv(meta, process.env).filter(
+      (key) => !emptyRequiredSet.has(key)
+    );
     if (missing.length) {
       sections.push(t(lang, "MISSING_ENV"));
       missing.forEach((k) => sections.push(`- ${k}`));
       sections.push("");
     }
-    if (opts.strict) {
+    if (production && emptyRequired.length) {
+      sections.push(t(lang, "EMPTY_REQUIRED_ENV"));
+      emptyRequired.forEach((k) => sections.push(`- ${k}`));
+      sections.push("");
+    }
+    if (strictEffective) {
       const unknown = getUnknownEnv(meta, loaded.env);
       if (unknown.length) {
         sections.push(t(lang, "UNKNOWN_ENV"));

package/dist/cli/index.js

@@ -2,10 +2,11 @@
 import {
   generateEnvDocs,
   generateEnvExample,
+  getEmptyRequiredEnv,
   getMissingEnv,
   getUnknownEnv,
   isSecretKey
-} from "../chunk-WWWQDMV5.js";
+} from "../chunk-AGSAWBDX.js";
 
 // src/cli/index.ts
 import { Command } from "commander";
@@ -26,6 +27,7 @@ var messages = {
     GENERATED: "Generated: {example}, {docs}",
     ENV_OK: "Environment looks good.",
     MISSING_ENV: "Missing required environment variables:",
+    EMPTY_REQUIRED_ENV: "Required environment variables are empty (production; dotenv-loaded keys):",
     UNKNOWN_ENV: "Unknown environment variables (strict mode; only dotenv-loaded keys):",
     INVALID_FORMAT: "Invalid docs format",
     INVALID_MASK_MODE: "Invalid mask mode",
@@ -53,6 +55,7 @@ var messages = {
     GENERATED: "\u0421\u0433\u0435\u043D\u0435\u0440\u0438\u0440\u043E\u0432\u0430\u043D\u043E: {example}, {docs}",
     ENV_OK: "\u041F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F \u0432 \u043F\u043E\u0440\u044F\u0434\u043A\u0435.",
     MISSING_ENV: "\u041E\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044E\u0442 \u043E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u044B\u0435 \u043F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F:",
+    EMPTY_REQUIRED_ENV: "\u041E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u044B\u0435 \u043F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F \u043F\u0443\u0441\u0442\u044B\u0435 (production; \u0442\u043E\u043B\u044C\u043A\u043E \u0438\u0437 dotenv-\u0444\u0430\u0439\u043B\u043E\u0432):",
     UNKNOWN_ENV: "\u041E\u0431\u043D\u0430\u0440\u0443\u0436\u0435\u043D\u044B \u043D\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043D\u044B\u0435 \u043F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0435 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F (strict; \u0442\u043E\u043B\u044C\u043A\u043E \u0438\u0437 dotenv-\u0444\u0430\u0439\u043B\u043E\u0432):",
     INVALID_FORMAT: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0444\u043E\u0440\u043C\u0430\u0442 \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0430\u0446\u0438\u0438",
     INVALID_MASK_MODE: "\u041D\u0435\u0432\u0435\u0440\u043D\u044B\u0439 \u0440\u0435\u0436\u0438\u043C \u043C\u0430\u0441\u043A\u0438\u0440\u043E\u0432\u043A\u0438",
@@ -427,17 +430,26 @@ function registerCheck(program2, getLang2) {
   ).action(async (opts) => {
     const lang = getLang2();
     const production = Boolean(opts.production);
-    void production;
+    const strictEffective = Boolean(opts.strict) || production;
     const loaded = loadDotEnv(opts.dotenv);
     const { meta } = loadMeta(lang, opts.config);
     const sections = [];
-    const missing = getMissingEnv(meta, process.env);
+    const emptyRequired = production ? getEmptyRequiredEnv(meta, loaded.env) : [];
+    const emptyRequiredSet = new Set(emptyRequired);
+    const missing = getMissingEnv(meta, process.env).filter(
+      (key) => !emptyRequiredSet.has(key)
+    );
     if (missing.length) {
       sections.push(t(lang, "MISSING_ENV"));
       missing.forEach((k) => sections.push(`- ${k}`));
       sections.push("");
     }
-    if (opts.strict) {
+    if (production && emptyRequired.length) {
+      sections.push(t(lang, "EMPTY_REQUIRED_ENV"));
+      emptyRequired.forEach((k) => sections.push(`- ${k}`));
+      sections.push("");
+    }
+    if (strictEffective) {
       const unknown = getUnknownEnv(meta, loaded.env);
       if (unknown.length) {
         sections.push(t(lang, "UNKNOWN_ENV"));

package/dist/index.cjs

@@ -24,6 +24,7 @@ __export(index_exports, {
   formatZodError: () => formatZodError,
   generateEnvDocs: () => generateEnvDocs,
   generateEnvExample: () => generateEnvExample,
+  getEmptyRequiredEnv: () => getEmptyRequiredEnv,
   getMissingEnv: () => getMissingEnv,
   getUnknownEnv: () => getUnknownEnv,
   isSecretKey: () => isSecretKey,
@@ -207,6 +208,17 @@ function getMissingEnv(meta, env = process.env) {
   }
   return missing;
 }
+function getEmptyRequiredEnv(meta, env) {
+  const empty = [];
+  for (const [key, m] of Object.entries(meta)) {
+    const required = m.required !== false;
+    if (!required) continue;
+    if (!Object.prototype.hasOwnProperty.call(env, key)) continue;
+    if (env[key].trim() === "") empty.push(key);
+  }
+  empty.sort((a, b) => a.localeCompare(b));
+  return empty;
+}
 function getUnknownEnv(meta, env = process.env) {
   const known = new Set(Object.keys(meta));
   const unknown = [];
@@ -272,6 +284,7 @@ function formatZodError(err) {
   formatZodError,
   generateEnvDocs,
   generateEnvExample,
+  getEmptyRequiredEnv,
   getMissingEnv,
   getUnknownEnv,
   isSecretKey,

package/dist/index.d.cts

@@ -169,6 +169,16 @@ type EnvCheckResult = {
  * @since 1.2.0
  */
 declare function getMissingEnv(meta: EnvMeta, env?: NodeJS.ProcessEnv): string[];
+/**
+ * Return required keys from `meta` that are present in `env` but empty after trim.
+ *
+ * Used by the CLI in `--production` mode to catch dotenv entries like `PORT=` or `PORT="   "`
+ * without changing default `check` behavior for whitespace-only values.
+ *
+ * @public
+ * @since 1.5.1
+ */
+declare function getEmptyRequiredEnv(meta: EnvMeta, env: Record<string, string>): string[];
 /**
  * Return keys present in `env` that are not defined in `meta`.
  *
@@ -300,4 +310,4 @@ declare function mustLoadEnv<T extends z.ZodTypeAny>(schema: T): z.infer<T>;
  */
 declare function formatZodError(err: z.ZodError): string;
 
-export { type DocsFormat, type EnvCheckResult, type EnvMeta, type EnvMetaEntry, type GenerateDocsOptions, type LoadEnvFail, type LoadEnvOk, type LoadEnvOptions, type SortMode, checkEnv, formatZodError, generateEnvDocs, generateEnvExample, getMissingEnv, getUnknownEnv, isSecretKey, loadEnv, mustLoadEnv, sortMetaEntries };
+export { type DocsFormat, type EnvCheckResult, type EnvMeta, type EnvMetaEntry, type GenerateDocsOptions, type LoadEnvFail, type LoadEnvOk, type LoadEnvOptions, type SortMode, checkEnv, formatZodError, generateEnvDocs, generateEnvExample, getEmptyRequiredEnv, getMissingEnv, getUnknownEnv, isSecretKey, loadEnv, mustLoadEnv, sortMetaEntries };

package/dist/index.d.ts

@@ -169,6 +169,16 @@ type EnvCheckResult = {
  * @since 1.2.0
  */
 declare function getMissingEnv(meta: EnvMeta, env?: NodeJS.ProcessEnv): string[];
+/**
+ * Return required keys from `meta` that are present in `env` but empty after trim.
+ *
+ * Used by the CLI in `--production` mode to catch dotenv entries like `PORT=` or `PORT="   "`
+ * without changing default `check` behavior for whitespace-only values.
+ *
+ * @public
+ * @since 1.5.1
+ */
+declare function getEmptyRequiredEnv(meta: EnvMeta, env: Record<string, string>): string[];
 /**
  * Return keys present in `env` that are not defined in `meta`.
  *
@@ -300,4 +310,4 @@ declare function mustLoadEnv<T extends z.ZodTypeAny>(schema: T): z.infer<T>;
  */
 declare function formatZodError(err: z.ZodError): string;
 
-export { type DocsFormat, type EnvCheckResult, type EnvMeta, type EnvMetaEntry, type GenerateDocsOptions, type LoadEnvFail, type LoadEnvOk, type LoadEnvOptions, type SortMode, checkEnv, formatZodError, generateEnvDocs, generateEnvExample, getMissingEnv, getUnknownEnv, isSecretKey, loadEnv, mustLoadEnv, sortMetaEntries };
+export { type DocsFormat, type EnvCheckResult, type EnvMeta, type EnvMetaEntry, type GenerateDocsOptions, type LoadEnvFail, type LoadEnvOk, type LoadEnvOptions, type SortMode, checkEnv, formatZodError, generateEnvDocs, generateEnvExample, getEmptyRequiredEnv, getMissingEnv, getUnknownEnv, isSecretKey, loadEnv, mustLoadEnv, sortMetaEntries };

package/dist/index.js

@@ -2,11 +2,12 @@ import {
   checkEnv,
   generateEnvDocs,
   generateEnvExample,
+  getEmptyRequiredEnv,
   getMissingEnv,
   getUnknownEnv,
   isSecretKey,
   sortMetaEntries
-} from "./chunk-WWWQDMV5.js";
+} from "./chunk-AGSAWBDX.js";
 
 // src/index.ts
 function loadEnv(schema, opts) {
@@ -36,6 +37,7 @@ export {
   formatZodError,
   generateEnvDocs,
   generateEnvExample,
+  getEmptyRequiredEnv,
   getMissingEnv,
   getUnknownEnv,
   isSecretKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zod-envkit",
-  "version": "1.4.0",
+  "version": "1.5.1",
   "description": "Validate environment variables with Zod and generate .env.example",
   "license": "MIT",
   "author": "",