Prepare 0.1.0: one dotenv grammar, path policy, redactor, and safer writes

- parseDotenv, validate, and every edit share the round-trip document parser
- Path policy helpers (isEnvFile, isSensitiveEnvFile, isEnvSitterPepperFile) used by envsitter-guard
- CLI file commands run through the library file operations
- EnvSitter#redactor() and the redact command replace secret-looking values in text
- Writes keep file permissions and go through symlinks; new files are 0600
- An existing pepper is never replaced; a new .envsitter/ gets a .gitignore
- set/add/copy into empty files write clean output
- Regexes with g/y flags no longer skip keys
- TypeScript 6, Node 22+ engines, prepack build, dist/test excluded from the package

src/file-ops.ts

@@ -9,36 +9,18 @@ import {
   setDotenvKey,
   unsetDotenvKey,
   validateDotenv,
+  type AnnotatePlan,
+  type CopyConflictPolicy,
+  type CopyPlanItem,
+  type FormatMode,
+  type FormatSort,
   type KeyMutationAction,
   type KeyMutationPlanItem
 } from './dotenv/edit.js';
+import type { DotenvIssue } from './dotenv/document.js';
 import { readTextFileOrEmpty, writeTextFileAtomic } from './dotenv/io.js';
 
-export type DotenvIssue = {
-  line: number;
-  column: number;
-  message: string;
-};
-
-export type CopyConflictPolicy = 'error' | 'skip' | 'overwrite';
-
-export type CopyPlanItem = {
-  fromKey: string;
-  toKey: string;
-  action: 'copy' | 'skip' | 'overwrite' | 'missing_source' | 'conflict';
-  fromLine?: number;
-  toLine?: number;
-};
-
-export type FormatMode = 'sections' | 'global';
-export type FormatSort = 'alpha' | 'none';
-
-export type AnnotatePlan = {
-  key: string;
-  action: 'inserted' | 'updated' | 'not_found' | 'ambiguous';
-  keyLines?: number[];
-  line?: number;
-};
+export type { AnnotatePlan, CopyConflictPolicy, CopyPlanItem, DotenvIssue, FormatMode, FormatSort };
 
 export type CopyEnvFilesResult = {
   from: string;