@perform/config and @repo/utils

​

@perform/config

export function defineEnv<TSchema extends ZodType>(schema: TSchema): ReturnType<TSchema['parse']>;

1. Calls dotenv’s config() once per process. That loads .env from the current working directory into process.env without overriding variables that are already set.
2. Runs schema.safeParse(process.env).
3. On success returns the parsed, typed object.
4. On failure writes config validation failed: and one indented line per issue (path: message) to stderr, then calls process.exit(78).

​

Usage

import { defineEnv } from '@perform/config';
import { z } from 'zod';

const schema = z.object({
  PORT: z.coerce.number().int().positive().default(8000),
  DATABASE_URL: z.string().min(1),
});

export type Env = z.infer<typeof schema>;
export const loadEnv = (): Env => defineEnv(schema);

​

Things to know

• It is the only sanctioned way to read env in apps/core-api and @perform/* code. The ESLint rule perform-internal/no-direct-process-env enforces it. The package itself is exempt, as are the ported @repo/* packages.
• Call it once. loadEnv() is called in load-env.ts for the early failure and again in main() to get the value. Parsing twice is harmless. Do not call it in module scope of a file that tests import, because a missing variable exits the test process.
• .env location. dotenv reads from the working directory. pnpm dev:api runs in apps/core-api, which has its own .env. The pm2 config starts the process with node --env-file=.env as well.
• Unknown variables are ignored. z.object strips keys it does not know, so the returned object contains only schema keys. A variable used by a @repo/* package does not need to be in the schema and will not be on ctx.env.
• Empty strings count as set. z.string().default('x') only applies the default when the variable is undefined. FOO= in .env yields an empty string. Several features rely on that to mean “disabled”.

​

@repo/utils

​

Base URL helpers (lib/base-url.ts)

• @repo/auth: baseURL and trustedOrigins of the better-auth instance, and the links in invitation emails, all from NEXT_PUBLIC_SAAS_URL.
• @repo/api: the CORS origin list of the Hono app.
• @repo/notifications: resolveNotificationLink turns a relative path into an absolute web app URL.

​

Password schema (lib/password-validation.ts)

export const passwordSchema: z.ZodString; // with refinements

​

Where small helpers go