pcenv

Your configs and secrets in one encrypted vault on your machine. Switch a repo's .env between environments with one command, and let AI agents use your secrets without ever seeing them.

Install

No sudo or admin rights. Checks the SHA-256 and adds pcenv to your PATH.

Use

# in any repo
pcenv init                 # import .env into the vault
pcenv use staging          # .env is now on staging
pcenv add OPENAI_API_KEY   # a key shared across your apps
pcenv run staging -- npm test # inject without writing a file

Why

• Local and encrypted. One AES-256 file, key in your OS keychain. No server, no account.
• Whole-folder switching. Every tool that reads .env sees the new env: Next.js, Vite, Prisma, Docker, Python.
• Shared keys. Rotate OPENAI_API_KEY once, every app picks it up.
• Agent-safe. Agents can switch envs and run commands, but never print a value or touch prod.

For AI agents

Read llms.txt or the agent install guide.