env-seal

A zero-dependency, zero-knowledge AES-256-GCM .env vault and TypeScript type generator.

---

Why env-seal?

1. Commit Safety: Safely check in your encrypted .env.sealed to Git without risking secret leakage.
2. Key Derivation: Uses industrial-standard scrypt with random salt and authenticated GCM tags.
3. End-to-End Type Safety: Automatically turns .env into env.d.ts so process.env is autocompleted and verified by TypeScript.

---

Quick Usage

# Encrypt .env to .env.sealed
npx env-seal --seal --pass "master_password"

# Decrypt .env.sealed
npx env-seal --unseal --pass "master_password"

# Generate TypeScript definitions for process.env
npx env-seal --types --out src/env.d.ts

---

License

MIT © luckdevx