@effect-anything/envault

Envault is an OpenTUI CLI for discovering, browsing, and editing dotenv files across a single repository or a monorepo.

It is designed for shell use, so the command name is short and hyphen-free:

envault

What it does

• scans repository roots and workspace package directories for .env* files
• ignores .env.keys, .envrc, build outputs, VCS folders, and dependency folders
• parses plain dotenv files and detects encrypted: dotenvx values
• optionally decrypts encrypted values when a matching .env.keys file is present
• supports add, edit, delete, create-file, and list flows through Effect services first
• renders the interactive workflow through an OpenTUI React interface

CLI usage

When installed as a package:

envault --root /path/to/repo
envault --root /path/to/repo --decrypt
envault --root /path/to/repo --list

For local development:

bun run src/bin.ts --root /path/to/repo
bun run src/bin.ts --root /path/to/repo --decrypt
bun run src/bin.ts --root /path/to/repo --list

By default, Envault launches the TUI. --list prints a non-interactive summary.

Development

bun install
bun run test
bun run typecheck
bun run build
bun run check

Notes

• Primary runtime targets are bun for scripts and node >= 24 for the built package.
• The repo still follows the original library-template workflow, but the product surface is now centered on the envault CLI.