P.02 / 05
·
◐ archived
dotenvx-tui —
Encrypted env tooling in the terminal.
Personal tooling project for managing dotenvx-encrypted
environment files across monorepo scopes. I built the Go TUI, release
pipeline, and npm launcher, then archived it when the project that
needed it moved away from dotenvx.
§ 01Details
The tool scans a target repository for encrypted
.env.* files, verifies the
DOTENV_PUBLIC_KEY header, derives scopes from
directories and environments from file suffixes, then presents them
as a keyboard-driven three-panel interface: scopes, environments,
and keys. It supports create, set, reveal, delete, diff, import,
export, copy, and multi-select batch operations.
§ 02Decisions
v2 rewrote the original Bash prototype as a Go/Bubble Tea
application with focused packages for UI,
dotenvx subprocess execution, secret handling,
validation, file watching, and clipboard behaviour. The security
boundary matters: subprocesses receive a minimal environment,
selected paths are validated against the target directory, decrypted
previews use clearable byte buffers, and set/delete operations
rewrite through private staged plaintext plus atomic replacement
instead of decrypting the target file in place.
§ 03Stack
Go
Bubble Tea
Lipgloss
npm
GitHub