{
  "$schema": "https://evnx.dev/schemas/placeholders.v1.json",
  "description": "Team-specific placeholder conventions",
  "patterns": {
    ".*_API_KEY$": "sk_demo_XXXXXXXXXXXXXXXX",
    ".*_SECRET$": "demo_secret_placeholder",
    "DATABASE_URL": "postgresql://demo:demo@localhost:5432/demo_db",
    "REDIS_URL": "redis://localhost:6379/0",
    ".*_PORT$": "8080",
    ".*_HOST$": "localhost",
    ".*_URL$": "https://api.demo.example.com",
    "DEBUG": "true",
    "ENVIRONMENT": "development",
    "LOG_LEVEL": "debug"
  },
  "default": "REPLACE_IN_PRODUCTION",
  "allow_actual": [
    "APP_NAME",
    "APP_VERSION",
    "ENVIRONMENT",
    "LOG_LEVEL"
  ],
  "naming_convention": {
    "style": "SCREAMING_SNAKE_CASE",
    "allow_prefixes": ["MY_APP_", "SERVICE_"],
    "warn_on_lowercase": true
  }
}

.*      Match any characters (zero or more)
.+      Match any characters (one or more)
^       Start of string
$       End of string
|       OR operator
()      Grouping
[]      Character class
?       Zero or one of preceding
*       Zero or more of preceding
+       One or more of preceding

{
  "naming_convention": {
    "style": "SCREAMING_SNAKE_CASE",
    "allow_prefixes": ["MY_APP_", "SERVICE_", "LEGACY_"],
    "warn_on_lowercase": true
  }
}

# Disable colors for CI logs
NO_COLOR=1 evnx sync --verbose

# Force dry-run via env var (overrides CLI)
EVNX_SYNC_DRY_RUN=1 evnx sync

fn atomic_write(path: &str, content: &str) -> Result<()> {
    let temp = NamedTempFile::new_in(parent_dir)?;
    temp.write_all(content)?;
    temp.sync_all()?;
    temp.persist(path)?;

    if path.ends_with(".env") {
        set_permissions(path, 0o600)?;
    }
    Ok(())
}

evnx sync --direction forward --verbose

#!/bin/bash
if git diff --quiet HEAD -- .env; then
  echo "✓ .env unchanged, skipping sync"
  exit 0
fi

echo "🔄 .env changed, updating template..."
evnx sync --direction forward --dry-run --force

if ! git diff --quiet .env.example; then
  echo "⚠️  .env.example needs updates"
  echo "Run: evnx sync --direction forward"
  exit 1
fi

output=$(EVNX_OUTPUT_JSON=1 evnx sync --dry-run --force 2>/dev/null)
errors=$(echo "$output" | jq -r '.errors | length')

if [ "$errors" -gt 0 ]; then
  echo "🚫 Sync validation failed:"
  echo "$output" | jq -r '.errors[]'
  exit 1
fi

warnings=$(echo "$output" | jq -r '.warnings | length')
if [ "$warnings" -gt 0 ]; then
  echo "⚠️  $warnings warnings (non-blocking):"
  echo "$output" | jq -r '.warnings[]'
fi

for env in development staging production; do
  echo "🔄 Syncing $env environment..."
  evnx sync \
    --direction forward \
    --template-config ".evnx/placeholders-$env.json" \
    --naming-policy error \
    --dry-run
done

# 1. Validate JSON syntax
cat .evnx/placeholders.json | jq . || echo "Invalid JSON"

# 2. Test regex pattern manually
echo "STRIPE_API_KEY" | grep -iE ".*_API_KEY$"

# 3. Run sync with verbose to see pattern evaluation
evnx sync --template-config .evnx/placeholders.json --verbose 2>&1 | grep -i "pattern|match"

evnx sync --naming-policy error --verbose 2>&1 | grep "naming_policy"
cat .evnx/placeholders.json | jq '.naming_convention'

# Use WSL or Git Bash for sync operations
# Or ensure no other process has .env open during sync
evnx sync