<?php

/*
 * This file is part of the Symfony package.
 *
 * (c) Fabien Potencier <fabien@symfony.com>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Symfony\Component\Dotenv;

use Symfony\Component\Dotenv\Exception\FormatException;
use Symfony\Component\Dotenv\Exception\FormatExceptionContext;
use Symfony\Component\Dotenv\Exception\PathException;
use Symfony\Component\Dotenv\Exception\VariableCircularReferenceException;
use Symfony\Component\Process\Exception\ExceptionInterface as ProcessException;
use Symfony\Component\Process\Process;

/**
 * Manages .env files.
 *
 * @author Fabien Potencier <fabien@symfony.com>
 * @author Kévin Dunglas <dunglas@gmail.com>
 */
final class Dotenv
{
    public const VARNAME_REGEX = '(?i:_*[A-Z][A-Z0-9_]*+)';
    public const STATE_VARNAME = 0;
    public const STATE_VALUE = 1;

    private string $path;
    private int $cursor;
    private int $lineno;
    private string $data;
    private int $end;
    private array $values = [];
    private array $overriddenValues = [];
    private array $loadedRawVars = [];
    private array $prodEnvs = ['prod'];
    private bool $usePutenv = false;
    private bool $deferPutenv = false;
    private array $pendingPutenv = [];

    public function __construct(
        private string $envKey = 'APP_ENV',
        private string $debugKey = 'APP_DEBUG',
    ) {
    }

    /**
     * @return $this
     */
    public function setProdEnvs(array $prodEnvs): static
    {
        $this->prodEnvs = $prodEnvs;

        return $this;
    }

    /**
     * @param bool $usePutenv If `putenv()` should be used to define environment variables or not.
     *                        Beware that `putenv()` is not thread safe, that's why it's not enabled by default
     *
     * @return $this
     */
    public function usePutenv(bool $usePutenv = true): static
    {
        $this->usePutenv = $usePutenv;

        return $this;
    }

    /**
     * Loads one or several .env files.
     *
     * @param string $path          A file to load
     * @param string ...$extraPaths A list of additional files to load
     *
     * @throws FormatException when a file has a syntax error
     * @throws PathException   when a file does not exist or is not readable
     */
    public function load(string $path, string ...$extraPaths): void
    {
        $this->deferPutenv = true;
        try {
            $this->doLoad(false, \func_get_args());
            $this->resolveLoadedVars();
        } finally {
            $this->deferPutenv = false;
        }
    }

    /**
     * Loads a .env file and the corresponding .env.local, .env.$env and .env.$env.local files if they exist.
     *
     * .env.local is always ignored in test env because tests should produce the same results for everyone.
     * .env.dist is loaded when it exists and .env is not found.
     *
     * @param string      $path                 A file to load
     * @param string|null $envKey               The name of the env vars that defines the app env
     * @param string      $defaultEnv           The app env to use when none is defined
     * @param array       $testEnvs             A list of app envs for which .env.local should be ignored
     * @param bool        $overrideExistingVars Whether existing environment variables set by the system should be overridden
     *
     * @throws FormatException when a file has a syntax error
     * @throws PathException   when a file does not exist or is not readable
     */
    public function loadEnv(string $path, ?string $envKey = null, string $defaultEnv = 'dev', array $testEnvs = ['test'], bool $overrideExistingVars = false): void
    {
        $this->populatePath($path);

        $this->deferPutenv = true;
        try {
            $k = $envKey ?? $this->envKey;

            if (is_file($path) || !is_file($p = "$path.dist")) {
                $this->doLoad($overrideExistingVars, [$path]);
            } else {
                $this->doLoad($overrideExistingVars, [$p]);
            }

            if (null === $env = $_SERVER[$k] ?? $_ENV[$k] ?? null) {
                $this->populate([$k => $env = $defaultEnv], $overrideExistingVars);
            } elseif (str_contains($env, '$') || str_contains($env, "\x00") || str_contains($env, '\\')) {
                $env = $this->resolveEnvKey($env, $k);
            }

            if (!\in_array($env, $testEnvs, true) && is_file($p = "$path.local")) {
                $this->doLoad($overrideExistingVars, [$p]);
                $env = $_SERVER[$k] ?? $_ENV[$k] ?? $env;
                if (str_contains($env, '$') || str_contains($env, "\x00") || str_contains($env, '\\')) {
                    $env = $this->resolveEnvKey($env, $k);
                }
            }

            if ('local' === $env) {
                return;
            }

            if (is_file($p = "$path.$env")) {
                $this->doLoad($overrideExistingVars, [$p]);
            }

            if (is_file($p = "$path.$env.local")) {
                $this->doLoad($overrideExistingVars, [$p]);
            }
        } finally {
            try {
                $this->resolveLoadedVars();
            } finally {
                $this->deferPutenv = false;
            }
        }
    }

    /**
     * Loads env vars from .env.local.php if the file exists or from the other .env files otherwise.
     *
     * This method also configures the APP_DEBUG env var according to the current APP_ENV.
     *
     * See method loadEnv() for rules related to .env files.
     */
    public function bootEnv(string $path, string $defaultEnv = 'dev', array $testEnvs = ['test'], bool $overrideExistingVars = false): void
    {
        $p = $path.'.local.php';
        $env = is_file($p) ? include $p : null;
        $k = $this->envKey;

        if (\is_array($env) && ($overrideExistingVars || !isset($env[$k]) || ($_SERVER[$k] ?? $_ENV[$k] ?? $env[$k]) === $env[$k])) {
            $this->populatePath($path);
            $this->populate($env, $overrideExistingVars);
        } else {
            $this->loadEnv($path, $k, $defaultEnv, $testEnvs, $overrideExistingVars);
        }

        $_SERVER += $_ENV;

        $k = $this->debugKey;
        $debug = $_SERVER[$k] ?? !\in_array($_SERVER[$this->envKey], $this->prodEnvs, true);
        $_SERVER[$k] = $_ENV[$k] = (int) $debug || (!\is_bool($debug) && filter_var($debug, \FILTER_VALIDATE_BOOL)) ? '1' : '0';
    }

    /**
     * Loads one or several .env files and enables override existing vars.
     *
     * @param string $path          A file to load
     * @param string ...$extraPaths A list of additional files to load
     *
     * @throws FormatException when a file has a syntax error
     * @throws PathException   when a file does not exist or is not readable
     */
    public function overload(string $path, string ...$extraPaths): void
    {
        $this->deferPutenv = true;
        try {
            $this->doLoad(true, \func_get_args());
            $this->resolveLoadedVars();
        } finally {
            $this->deferPutenv = false;
        }
    }

    /**
     * Sets values as environment variables (via putenv, $_ENV, and $_SERVER).
     *
     * @param array $values               An array of env variables
     * @param bool  $overrideExistingVars Whether existing environment variables set by the system should be overridden
     */
    public function populate(array $values, bool $overrideExistingVars = false): void
    {
        $updateLoadedVars = false;
        $loadedVars = array_flip(explode(',', $_SERVER['SYMFONY_DOTENV_VARS'] ?? $_ENV['SYMFONY_DOTENV_VARS'] ?? ''));

        foreach ($values as $name => $value) {
            $notHttpName = !str_starts_with($name, 'HTTP_');
            if (isset($_SERVER[$name]) && $notHttpName && !isset($_ENV[$name])) {
                $_ENV[$name] = $_SERVER[$name];
            }

            // don't check existence with getenv() because of thread safety issues
            if (!isset($loadedVars[$name]) && !$overrideExistingVars && isset($_ENV[$name])) {
                continue;
            }

            if ($this->usePutenv) {
                if ($this->deferPutenv) {
                    $this->pendingPutenv[$name] = true;
                } else {
                    putenv("$name=$value");
                }
            }

            $_ENV[$name] = $value;
            if ($notHttpName) {
                $_SERVER[$name] = $value;
            }

            if (!isset($loadedVars[$name])) {
                $loadedVars[$name] = $updateLoadedVars = true;
            }
        }

        if ($updateLoadedVars) {
            unset($loadedVars['']);
            $loadedVars = implode(',', array_keys($loadedVars));
            $_ENV['SYMFONY_DOTENV_VARS'] = $_SERVER['SYMFONY_DOTENV_VARS'] = $loadedVars;

            if ($this->usePutenv) {
                putenv('SYMFONY_DOTENV_VARS='.$loadedVars);
            }
        }
    }

    /**
     * Parses the contents of an .env file.
     *
     * @param string $data The data to be parsed
     * @param string $path The original file name where data where stored (used for more meaningful error messages)
     *
     * @throws FormatException when a file has a syntax error
     */
    public function parse(string $data, string $path = '.env'): array
    {
        $this->path = $path;
        $this->data = str_replace(["\r\n", "\r"], "\n", $data);
        $this->lineno = 1;
        $this->cursor = 0;
        $this->end = \strlen($this->data);
        $state = self::STATE_VARNAME;
        $this->values = [];
        $name = '';

        $loadedVars = array_flip(explode(',', $_SERVER['SYMFONY_DOTENV_VARS'] ?? $_ENV['SYMFONY_DOTENV_VARS'] ?? ''));
        unset($loadedVars['']);

        $this->skipEmptyLines();

        while ($this->cursor < $this->end) {
            switch ($state) {
                case self::STATE_VARNAME:
                    $name = $this->lexVarname();
                    $state = self::STATE_VALUE;
                    break;

                case self::STATE_VALUE:
                    $this->values[$name] = $this->resolveValue($this->lexValue(), $loadedVars);
                    $state = self::STATE_VARNAME;
                    break;
            }
        }

        if (self::STATE_VALUE === $state) {
            $this->values[$name] = '';
        }

        try {
            return $this->values;
        } finally {
            $this->values = [];
            unset($this->path, $this->cursor, $this->lineno, $this->data, $this->end);
        }
    }

    private function parseRaw(string $data, string $path = '.env'): array
    {
        $this->path = $path;
        $this->data = str_replace(["\r\n", "\r"], "\n", $data);
        $this->lineno = 1;
        $this->cursor = 0;
        $this->end = \strlen($this->data);
        $state = self::STATE_VARNAME;
        $this->values = [];
        $name = '';

        $this->skipEmptyLines();

        while ($this->cursor < $this->end) {
            switch ($state) {
                case self::STATE_VARNAME:
                    $name = $this->lexVarname();
                    $state = self::STATE_VALUE;
                    break;

                case self::STATE_VALUE:
                    $this->values[$name] = $this->lexValue();
                    $state = self::STATE_VARNAME;
                    break;
            }
        }

        if (self::STATE_VALUE === $state) {
            $this->values[$name] = '';
        }

        try {
            return $this->values;
        } finally {
            $this->values = [];
        }
    }

    /**
     * Resolves a raw value by expanding commands, variables, backslash escapes,
     * and restoring literal $ markers.
     */
    private function resolveValue(string $value, array $loadedVars): string
    {
        $resolved = $this->resolveCommands($value, $loadedVars);
        $resolved = $this->resolveVariables($resolved, $loadedVars);
        $resolved = str_replace('\\\\', '\\', $resolved);

        return str_replace("\x00", '$', $resolved);
    }

    private function lexVarname(): string
    {
        // var name + optional export
        if (!preg_match('/(export[ \t]++)?('.self::VARNAME_REGEX.')/A', $this->data, $matches, 0, $this->cursor)) {
            throw $this->createFormatException('Invalid character in variable name');
        }
        $this->moveCursor($matches[0]);

        if ($this->cursor === $this->end || "\n" === $this->data[$this->cursor] || '#' === $this->data[$this->cursor]) {
            if ($matches[1]) {
                throw $this->createFormatException('Unable to unset an environment variable');
            }

            throw $this->createFormatException('Missing = in the environment variable declaration');
        }

        if (' ' === $this->data[$this->cursor] || "\t" === $this->data[$this->cursor]) {
            throw $this->createFormatException('Whitespace characters are not supported after the variable name');
        }

        if ('=' !== $this->data[$this->cursor]) {
            throw $this->createFormatException('Missing = in the environment variable declaration');
        }
        ++$this->cursor;

        return $matches[2];
    }

    private function lexValue(): string
    {
        if (preg_match('/[ \t]*+(?:#.*)?$/Am', $this->data, $matches, 0, $this->cursor)) {
            $this->moveCursor($matches[0]);
            $this->skipEmptyLines();

            return '';
        }

        if (' ' === $this->data[$this->cursor] || "\t" === $this->data[$this->cursor]) {
            throw $this->createFormatException('Whitespace are not supported before the value');
        }

        $v = '';

        do {
            if ("'" === $this->data[$this->cursor]) {
                $len = 0;

                do {
                    if ($this->cursor + ++$len === $this->end) {
                        $this->cursor += $len;

                        throw $this->createFormatException('Missing quote to end the value');
                    }
                } while ("'" !== $this->data[$this->cursor + $len]);

                // In single-quoted strings, $ is literal and \ has no special meaning.
                // Double backslashes so they survive the unescape in resolveValue(),
                // and mark $ as \x00 so it's not treated as a variable reference.
                $v .= str_replace(['\\', '$'], ['\\\\', "\x00"], substr($this->data, 1 + $this->cursor, $len - 1));
                $this->cursor += 1 + $len;
            } elseif ('"' === $this->data[$this->cursor]) {
                $value = '';

                if (++$this->cursor === $this->end) {
                    throw $this->createFormatException('Missing quote to end the value');
                }

                while ('"' !== $this->data[$this->cursor] || ('\\' === $this->data[$this->cursor - 1] && '\\' !== $this->data[$this->cursor - 2])) {
                    $value .= $this->data[$this->cursor];
                    ++$this->cursor;

                    if ($this->cursor === $this->end) {
                        throw $this->createFormatException('Missing quote to end the value');
                    }
                }
                ++$this->cursor;
                $value = str_replace(['\\"', '\r', '\n'], ['"', "\r", "\n"], $value);
                // Mark escaped $ (\$) as \x00 so it's treated as literal
                $v .= $this->protectEscapedDollars($value);
            } else {
                $value = '';
                $prevChr = $this->data[$this->cursor - 1];
                while ($this->cursor < $this->end && !\in_array($this->data[$this->cursor], ["\n", '"', "'"], true) && !((' ' === $prevChr || "\t" === $prevChr) && '#' === $this->data[$this->cursor])) {
                    if ('\\' === $this->data[$this->cursor] && isset($this->data[$this->cursor + 1]) && ('"' === $this->data[$this->cursor + 1] || "'" === $this->data[$this->cursor + 1])) {
                        ++$this->cursor;
                    }

                    $value .= $prevChr = $this->data[$this->cursor];

                    if ('$' === $this->data[$this->cursor] && isset($this->data[$this->cursor + 1]) && '(' === $this->data[$this->cursor + 1]) {
                        ++$this->cursor;
                        $value .= '('.$this->lexNestedExpression().')';
                    }

                    ++$this->cursor;
                }
                $value = rtrim($value);
                $resolvedValue = $this->protectEscapedDollars($value);

                if ($resolvedValue === $value && preg_match('/\s+/', $value) && !str_contains($value, '$')) {
                    throw $this->createFormatException('A value containing spaces must be surrounded by quotes');
                }

                $v .= $resolvedValue;

                if ($this->cursor < $this->end && '#' === $this->data[$this->cursor]) {
                    break;
                }
            }
        } while ($this->cursor < $this->end && "\n" !== $this->data[$this->cursor]);

        $this->skipEmptyLines();

        return $v;
    }

    /**
     * Converts \$ (escaped dollar) to \x00 (literal marker), handling
     * even/odd backslash counts correctly: \$ → \x00, \\$ → \\$ (unchanged).
     */
    private function protectEscapedDollars(string $value): string
    {
        if (!str_contains($value, '$')) {
            return $value;
        }

        return preg_replace_callback('/\\\\+\$/', static function ($m) {
            $bs = substr($m[0], 0, -1);
            if (1 === \strlen($bs) % 2) {
                return substr($bs, 0, -1)."\x00";
            }

            return $m[0];
        }, $value);
    }

    private function lexNestedExpression(): string
    {
        ++$this->cursor;
        $value = '';

        while ("\n" !== $this->data[$this->cursor] && ')' !== $this->data[$this->cursor]) {
            $value .= $this->data[$this->cursor];

            if ('(' === $this->data[$this->cursor]) {
                $value .= $this->lexNestedExpression().')';
            }

            ++$this->cursor;

            if ($this->cursor === $this->end) {
                throw $this->createFormatException('Missing closing parenthesis.');
            }
        }

        if ("\n" === $this->data[$this->cursor]) {
            throw $this->createFormatException('Missing closing parenthesis.');
        }

        return $value;
    }

    private function skipEmptyLines(): void
    {
        if (preg_match('/(?:\s*+(?:#[^\n]*+)?+)++/A', $this->data, $match, 0, $this->cursor)) {
            $this->moveCursor($match[0]);
        }
    }

    private function resolveCommands(string $value, array $loadedVars): string
    {
        if (!str_contains($value, '$')) {
            return $value;
        }

        $regex = '/
            (\\\\)?               # escaped with a backslash?
            \$
            (?<cmd>
                \(                # require opening parenthesis
                ([^()]|\g<cmd>)+  # allow any number of non-parens, or balanced parens (by nesting the <cmd> expression recursively)
                \)                # require closing paren
            )
        /x';

        return preg_replace_callback($regex, function ($matches) use ($loadedVars) {
            if ('\\' === $matches[1]) {
                return substr($matches[0], 1);
            }

            if ('\\' === \DIRECTORY_SEPARATOR) {
                throw new \LogicException('Resolving commands is not supported on Windows.');
            }

            if (!class_exists(Process::class)) {
                throw new \LogicException('Resolving commands requires the Symfony Process component. Try running "composer require symfony/process".');
            }

            $process = Process::fromShellCommandline('echo '.$matches[0]);

            $env = [];
            foreach ($this->values as $name => $value) {
                if (isset($loadedVars[$name]) || (!isset($_ENV[$name]) && !(isset($_SERVER[$name]) && !str_starts_with($name, 'HTTP_')))) {
                    $env[$name] = $value;
                }
            }
            $process->setEnv($env);

            try {
                $process->mustRun();
            } catch (ProcessException) {
                throw $this->createFormatException(\sprintf('Issue expanding a command (%s)', $process->getErrorOutput()));
            }

            return rtrim($process->getOutput(), "\n\r");
        }, $value);
    }

    private function resolveVariables(string $value, array $loadedVars): string
    {
        if (!str_contains($value, '$')) {
            return $value;
        }

        $regex = '/
            (?<!\\\\)
            (?P<backslashes>\\\\*)             # escaped with a backslash?
            \$
            (?!\()                             # no opening parenthesis
            (?P<opening_brace>\{)?             # optional brace
            (?P<name>'.self::VARNAME_REGEX.')? # var name
            (?P<default_value>:[-=][^\}]*+)?   # optional default value
            (?P<closing_brace>\})?             # optional closing brace
        /x';

        return preg_replace_callback($regex, function ($matches) use ($loadedVars) {
            // odd number of backslashes means the $ character is escaped
            if (1 === \strlen($matches['backslashes']) % 2) {
                return substr($matches[0], 1);
            }

            // unescaped $ not followed by variable name
            if (!isset($matches['name'])) {
                return $matches[0];
            }

            if ('{' === $matches['opening_brace'] && !isset($matches['closing_brace'])) {
                throw $this->createFormatException('Unclosed braces on variable expansion');
            }

            $name = $matches['name'];
            $isExternal = false;
            if (isset($loadedVars[$name]) && isset($this->values[$name])) {
                $value = $this->values[$name];
            } elseif (isset($_ENV[$name])) {
                $value = $_ENV[$name];
                $isExternal = true;
            } elseif (isset($_SERVER[$name]) && !str_starts_with($name, 'HTTP_')) {
                $value = $_SERVER[$name];
                $isExternal = true;
            } elseif (isset($this->values[$name])) {
                $value = $this->values[$name];
            } else {
                $value = (string) getenv($name);
                $isExternal = true;
            }

            if ('' !== $value && !isset($loadedVars[$name])) {
                if ($isExternal) {
                    // unlike values parsed from a .env file, external ones are not escaped yet
                    $value = str_replace('\\', '\\\\', $value);
                }
                $value = str_replace('$', "\x00", $value);
            }

            if ('' === $value && isset($matches['default_value']) && '' !== $matches['default_value']) {
                $unsupportedChars = strpbrk($matches['default_value'], '\'"{$');
                if (false !== $unsupportedChars) {
                    throw $this->createFormatException(\sprintf('Unsupported character "%s" found in the default value of variable "$%s".', $unsupportedChars[0], $name));
                }

                $value = substr($matches['default_value'], 2);

                if ('=' === $matches['default_value'][1]) {
                    $this->values[$name] = $value;
                }
            }

            if (!$matches['opening_brace'] && isset($matches['closing_brace'])) {
                $value .= '}';
            }

            return $matches['backslashes'].$value;
        }, $value);
    }

    private function moveCursor(string $text): void
    {
        $this->cursor += \strlen($text);
        $this->lineno += substr_count($text, "\n");
    }

    private function createFormatException(string $message): FormatException
    {
        return new FormatException($message, new FormatExceptionContext($this->data, $this->path, $this->lineno, $this->cursor));
    }

    private function doLoad(bool $overrideExistingVars, array $paths): void
    {
        foreach ($paths as $path) {
            if (!is_readable($path) || is_dir($path)) {
                throw new PathException($path);
            }

            $data = file_get_contents($path);

            if ("\xEF\xBB\xBF" === substr($data, 0, 3)) {
                throw new FormatException('Loading files starting with a byte-order-mark (BOM) is not supported.', new FormatExceptionContext($data, $path, 1, 0));
            }

            if (str_contains($data, "\0")) {
                throw new FormatException('Loading files containing NUL bytes is not supported.', new FormatExceptionContext($data, $path, 1, 0));
            }

            $values = $this->parseRaw($data, $path);

            $loadedVars = array_flip(explode(',', $_SERVER['SYMFONY_DOTENV_VARS'] ?? $_ENV['SYMFONY_DOTENV_VARS'] ?? ''));
            unset($loadedVars['']);

            foreach ($values as $name => $value) {
                $alreadyExternal = isset($_ENV[$name]) || isset($_SERVER[$name]) && !str_starts_with($name, 'HTTP_');
                if (!isset($this->overriddenValues[$name])) {
                    if ($alreadyExternal) {
                        $this->overriddenValues[$name] = $_ENV[$name] ?? $_SERVER[$name];
                    } elseif ($this->isSelfReferencing($name, $value) && false !== $external = getenv($name, true)) {
                        // the OS provides the value but neither $_ENV nor $_SERVER is populated;
                        // $localOnly skips the request-scoped SAPI env and its HTTP_* vars
                        $this->overriddenValues[$name] = $external;
                    }
                }
                if (isset($loadedVars[$name]) || $overrideExistingVars || !$alreadyExternal) {
                    $this->loadedRawVars[$name] = true;
                }
            }

            $this->populate($values, $overrideExistingVars);
        }
    }

    /**
     * Tells whether a raw value references the variable it defines
     * (e.g. MY_VAR="${MY_VAR:-default}").
     */
    private function isSelfReferencing(string $name, string $value): bool
    {
        return str_contains($value, '$') && preg_match('/\$\{?'.preg_quote($name, '/').'(?![A-Za-z0-9_])/', $value);
    }

    /**
     * Eagerly resolves a raw env key value so that loadEnv() can determine
     * which additional .env files to load before full deferred resolution.
     */
    private function resolveEnvKey(string $value, string $name): string
    {
        $loadedVars = array_flip(explode(',', $_SERVER['SYMFONY_DOTENV_VARS'] ?? $_ENV['SYMFONY_DOTENV_VARS'] ?? ''));
        unset($loadedVars['']);

        // Save and clear own value so self-referencing defaults work
        $envBackup = $_ENV[$name] ?? null;
        $serverBackup = $_SERVER[$name] ?? null;
        unset($_ENV[$name], $_SERVER[$name]);
        if ($this->usePutenv) {
            $getenvBackup = (string) getenv($name);
            putenv($name);
        }

        $this->values = [];
        $this->path = '';
        $this->data = '';
        $this->lineno = 0;
        $this->cursor = 0;
        $this->end = 0;

        $resolved = $this->resolveCommands($value, $loadedVars);
        $resolved = $this->resolveVariables($resolved, $loadedVars);
        $resolved = str_replace(["\x00", '\\\\'], ['$', '\\'], $resolved);

        if (null !== $envBackup) {
            $_ENV[$name] = $envBackup;
        }
        if (null !== $serverBackup) {
            $_SERVER[$name] = $serverBackup;
        }
        if ($this->usePutenv) {
            putenv("$name=$getenvBackup");
        }

        $this->values = [];

        return $resolved;
    }

    private function resolveLoadedVars(): void
    {
        $loadedVars = array_flip(explode(',', $_SERVER['SYMFONY_DOTENV_VARS'] ?? $_ENV['SYMFONY_DOTENV_VARS'] ?? ''));
        unset($loadedVars['']);

        $rawVars = $this->loadedRawVars;
        $this->loadedRawVars = [];
        unset($rawVars['SYMFONY_DOTENV_VARS']);

        $this->values = [];
        $this->path = '';
        $this->data = '';
        $this->lineno = 0;
        $this->cursor = 0;
        $this->end = 0;

        try {
            // Detect variables that were originally defined as self-referencing
            // so their own raw value is hidden during resolution, allowing the
            // external value or the default to trigger correctly.
            $selfReferencingVars = [];
            foreach ($rawVars as $name => $_) {
                if ($this->isSelfReferencing($name, $_ENV[$name] ?? '')) {
                    $selfReferencingVars[$name] = true;
                }
            }

            for ($pass = 0; $pass < 5; ++$pass) {
                $resolved = [];
                foreach ($rawVars as $name => $_) {
                    if (!str_contains($value = $_ENV[$name] ?? '', '$')) {
                        continue;
                    }

                    if (isset($selfReferencingVars[$name])) {
                        $envBackup = $_ENV[$name] ?? null;
                        $serverBackup = $_SERVER[$name] ?? null;
                        if (isset($this->overriddenValues[$name])) {
                            $_ENV[$name] = str_replace(['\\\\', '$'], ['\\\\\\\\', "\x00"], $this->overriddenValues[$name]);
                            $_SERVER[$name] = $_ENV[$name];
                        } else {
                            unset($_ENV[$name], $_SERVER[$name]);
                        }
                        if ($this->usePutenv) {
                            $getenvBackup = (string) getenv($name);
                            if (isset($this->overriddenValues[$name])) {
                                putenv("$name={$this->overriddenValues[$name]}");
                            } else {
                                putenv($name);
                            }
                        }
                    }

                    $resolvedValue = $this->resolveCommands($value, $loadedVars);
                    $resolvedValue = $this->resolveVariables($resolvedValue, $loadedVars);

                    if (isset($selfReferencingVars[$name])) {
                        if (null !== $envBackup) {
                            $_ENV[$name] = $envBackup;
                        }
                        if (null !== $serverBackup) {
                            $_SERVER[$name] = $serverBackup;
                        }
                        if ($this->usePutenv) {
                            putenv("$name=$getenvBackup");
                        }
                    }

                    if ($value !== $resolvedValue) {
                        $resolved[$name] = $resolvedValue;
                    }
                }
                if (!$resolved) {
                    break;
                }
                $this->populate($resolved, true);
            }
            if (5 === $pass && $resolved) {
                throw new VariableCircularReferenceException('Too many levels of variable indirection in env vars: '.implode(', ', array_keys($resolved)).'.');
            }

            // Restore literal $ signs and unescape backslashes
            $restored = [];
            foreach ($rawVars as $name => $_) {
                $value = $_ENV[$name] ?? '';
                if ($value !== $newValue = str_replace(["\x00", '\\\\'], ['$', '\\'], $value)) {
                    $restored[$name] = $newValue;
                }
            }
            if ($restored) {
                $this->populate($restored, true);
            }

            if ($this->usePutenv && $this->pendingPutenv) {
                foreach ($this->pendingPutenv as $name => $_) {
                    putenv($name.'='.($_ENV[$name] ?? ''));
                }
                $this->pendingPutenv = [];
            }
        } finally {
            $this->values = [];
            $this->overriddenValues = [];
            $this->pendingPutenv = [];
            unset($this->path, $this->data, $this->lineno, $this->cursor, $this->end);
        }
    }

    private function populatePath(string $path): void
    {
        $_ENV['SYMFONY_DOTENV_PATH'] = $_SERVER['SYMFONY_DOTENV_PATH'] = $path;

        if (!$this->usePutenv) {
            return;
        }
        if ($this->deferPutenv) {
            $this->pendingPutenv['SYMFONY_DOTENV_PATH'] = true;
        } else {
            putenv('SYMFONY_DOTENV_PATH='.$path);
        }
    }
}