{
  "action": "validate",
  "env_content": "DATABASE_URL=postgresql://user:pass@localhost/db\nPORT=8080\nDEBUG=false\n",
  "schema": {
    "keys": [
      {
        "name": "DATABASE_URL",
        "required": true,
        "type": "url"
      },
      {
        "name": "PORT",
        "required": true,
        "type": "integer"
      },
      {
        "name": "DEBUG",
        "required": false,
        "type": "bool"
      }
    ]
  }
}

{
  "action": "validate",
  "extras": [],
  "invalid": [],
  "missing": [],
  "valid": true
}

{
  "action": "validate",
  "env_content": "PORT=8080\nDEBUG=true\n",
  "schema": {
    "keys": [
      {
        "name": "DATABASE_URL",
        "required": true,
        "type": "url"
      },
      {
        "name": "PORT",
        "required": true,
        "type": "integer"
      }
    ]
  }
}

{
  "action": "validate",
  "extras": [],
  "invalid": [],
  "missing": [
    "DATABASE_URL"
  ],
  "valid": false
}

{
  "action": "validate",
  "env_content": "PORT=notanumber\nDEBUG=maybe\n",
  "schema": {
    "keys": [
      {
        "name": "PORT",
        "required": true,
        "type": "integer"
      },
      {
        "name": "DEBUG",
        "required": false,
        "type": "bool"
      }
    ]
  }
}

{
  "action": "validate",
  "extras": [],
  "invalid": [
    {
      "fix_hint": {
        "action": "update",
        "field": "PORT",
        "reference": "type: integer requires a whole number value",
        "suggested": "8080"
      },
      "key": "PORT",
      "reason": "\uc815\uc218 \ud0c0\uc785\uc774 \uc544\ub2d9\ub2c8\ub2e4 / Value is not a valid integer"
    },
    {
      "fix_hint": {
        "action": "update",
        "field": "DEBUG",
        "reference": "Accepted bool values: true, false, 1, 0, yes, no, on, off",
        "suggested": "false"
      },
      "key": "DEBUG",
      "reason": "bool \ud0c0\uc785\uc774 \uc544\ub2d9\ub2c8\ub2e4 / Value is not a valid boolean (true/false/1/0/yes/no)"
    }
  ],
  "missing": [],
  "valid": false
}

{
  "action": "infer_schema",
  "env_content": "DATABASE_URL=postgresql://user:pass@localhost/mydb\nPORT=5432\nDEBUG=false\nADMIN_EMAIL=admin@example.com\nSECRET_KEY=s3cr3t!xK9\n"
}

{
  "action": "infer_schema",
  "key_count": 5,
  "schema": {
    "keys": [
      {
        "name": "DATABASE_URL",
        "required": false,
        "sensitive": false,
        "type": "url"
      },
      {
        "name": "PORT",
        "required": false,
        "sensitive": false,
        "type": "integer"
      },
      {
        "name": "DEBUG",
        "required": false,
        "sensitive": false,
        "type": "bool"
      },
      {
        "name": "ADMIN_EMAIL",
        "required": false,
        "sensitive": false,
        "type": "email"
      },
      {
        "name": "SECRET_KEY",
        "required": false,
        "sensitive": true,
        "type": "string"
      }
    ]
  }
}

{
  "action": "mask",
  "env_content": "API_KEY=sk-abc123xyz\nDATABASE_URL=postgresql://user:secret@localhost/db\nAPP_NAME=myapp\nPASSWORD=hunter2\nPORT=3000\n"
}

{
  "action": "mask",
  "masked_content": "API_KEY=***MASKED***\nDATABASE_URL=postgresql://user:secret@localhost/db\nAPP_NAME=myapp\nPASSWORD=***MASKED***\nPORT=3000\n",
  "masked_keys": [
    "API_KEY",
    "PASSWORD"
  ]
}

{
  "action": "audit",
  "env_content": "PASSWORD=123456\nAPI_KEY=\nDATABASE_URL=http://prod-db/mydb\nPORT=3000\nPORT=3001\nSECRET_KEY=dev-secret\n  TRAILING_KEY =value\n"
}

{
  "action": "audit",
  "issues": [
    {
      "category": "SEC",
      "fix_hint": "Use a strong random password or reference a secrets manager",
      "key": "PASSWORD",
      "message": "\ud3c9\ubb38 \ud328\uc2a4\uc6cc\ub4dc\uac00 \ub108\ubb34 \ub2e8\uc21c\ud569\ub2c8\ub2e4 (\uc5d4\ud2b8\ub85c\ud53c \ub0ae\uc74c) / Plaintext password has low entropy",
      "rule": "SEC-001",
      "severity": "error"
    },
    {
      "category": "SEC",
      "fix_hint": "Switch to HTTPS/TLS connection URL",
      "key": "DATABASE_URL",
      "message": "\ud504\ub85c\ub355\uc158 \ud658\uacbd\uc5d0\uc11c HTTP URL \uc0ac\uc6a9 \uac10\uc9c0 / HTTP URL detected in what may be a production config",
      "rule": "SEC-002",
      "severity": "warning"
    },
    {
      "category": "QUAL",
      "fix_hint": "Provide a valid value or remove the key if unused",
      "key": "API_KEY",
      "message": "\ud544\uc218\ucc98\ub7fc \ubcf4\uc774\ub294 \ud0a4\uac00 \ube48 \uac12\uc785\ub2c8\ub2e4 / Key appears important but has an empty value",
      "rule": "QUAL-001",
      "severity": "error"
    },
    {
      "category": "QUAL",
      "fix_hint": "Remove duplicate definition; the last value wins in most parsers",
      "key": "PORT",
      "message": "\uc911\ubcf5 \ud0a4\uac00 \uac10\uc9c0\ub418\uc5c8\uc2b5\ub2c8\ub2e4 / Duplicate key detected",
      "rule": "QUAL-002",
      "severity": "warning"
    },
    {
      "category": "STR",
      "fix_hint": "Remove surrounding whitespace from key name",
      "key": "TRAILING_KEY",
      "message": "\ud0a4 \uc774\ub984\uc5d0 \uc55e\ub4a4 \uacf5\ubc31\uc774 \uc788\uc2b5\ub2c8\ub2e4 / Key name has leading/trailing whitespace",
      "rule": "STR-001",
      "severity": "info"
    }
  ],
  "score": 32
}