NodeJS utility for automatically resolving environment variables to secret values.
Generic inbound webhook capability pack for the Render agent harness.
Sprite-local Task Agent runner for Mote remote task execution.
CLI tool designed to run tests written in the BuildShip app
A secure alternative to dotenv — prevents sensitive '.env.secret' files from being pushed to Git and creates '.env.secret.example' automatically. Supports CommonJS and ES Module.
recipes for Galley
SecretEnv CLI — resolves aliases to secrets and runs commands with them injected
SecretEnv — typed `[mcp]` config schema. Lifted out of `secretenv-mcp` v0.16.2 (Phase 3 D.5 — Phase 7 architecture C-1) so future consumers (e.g. `secretenv doctor` validating the `[mcp]` table without spinning up rmcp) can depend on the config types alone.
SecretEnv — shared registry-document mutation helpers. Centralizes the `list + edit + serialize + set` transaction that `secretenv-cli` and `secretenv-mcp` use to apply alias insert / remove operations to a registry's primary source. Extracted v0.16.2 (Phase 7 architecture C-2 + code-review Medium).
SecretEnv — MCP server library. Stdio-only Model Context Protocol server giving AI agents structured access to the SecretEnv registry without ever exposing a resolved secret value. See [[build-plan-v0.16-mcp]].
SecretEnv — alias-migration engine. `migrate_with_plan` + `build_migration_plan` lifted from secretenv-cli at v0.16 (B1 carry-forward from v0.15) so the MCP server can wrap the same library entry the CLI uses.
SecretEnv — 1Password backend
SecretEnv — AWS Secrets Manager backend (supports #json-key=<field> URI fragment directive)
SecretEnv — AWS SSM Parameter Store backend
SecretEnv — Azure Key Vault backend (supports #version=<hex> URI fragment directive)
SecretEnv — Bitwarden Secrets Manager backend (project-scoped secrets via the `bws` CLI v2.x)
SecretEnv — Cloudflare Workers KV backend (wrangler-wrapped)
SecretEnv — CyberArk Conjur backend (variables via the Go-based `conjur` v8 CLI)