Skip to content

v0.2.0 — Milestone 2: Encrypted dotenv + CLI encryption

Choose a tag to compare

@bastianibanez bastianibanez released this 01 Apr 02:33
· 15 commits to main since this release
59c30af

What's new

Validation diagnostics

  • Aggregate load failures surfaced as structured errors
  • Public config validation error contract

Encrypted dotenv support

  • DotEnvLoader decrypts ECIES-encrypted .env files
  • Per-environment encrypted_dotenv block in YAML config
  • Dedicated private-key sources (local file or GCP Secret Manager)
  • DecryptionError public exception
  • NotImplementedError guard for encrypted dotenv on non-local origins

CLI encryption script

  • New env-manager-encrypt binary
  • encryptDotenvFile() generates secp256k1 key pairs via eciesjs
  • Encrypts plaintext values to encrypted:<base64>, writes .env.keys
  • Skips already-encrypted values and DOTENV_PUBLIC_KEY
  • --force flag, --env flag for named key variants
  • 4-line dotenvx-compatible header format

Bug fixes

  • Static ESM import for eciesjs (replaces dynamic require)
  • README updated for all Milestone 2 features

Install

npm install @notoriosti/env-manager@0.2.0