Workflows

Runtime Connector CLI

The app-managed envvault command that reads EnvVault profiles and injects variables into local commands.

Purpose

The runtime connector lets EnvVault profiles become runtime environment sources for terminal commands. Public profile values are read from SQLite. Secret profile values are resolved from macOS Keychain and fail safely if unavailable.

Commands

envvault doctor
envvault profiles
envvault print --project <project> --profile <profile>
envvault validate --project <project> --profile <profile>
envvault run --project <project> --profile <profile> -- npm run dev
envvault run --project <project> --profile <profile> -- bun run dev
envvault run --project <project> --profile <profile> -- bun test

Installed command

Settings installs a managed user-facing shim at ~/.local/bin/envvault. The shim is created by the app and forwards arguments to EnvVault's bundled CLI runtime. Users do not need source code to install or use it.

PATH management

Managed PATH blocks are added to ~/.zprofile and ~/.zshrc.
Shell files are backed up before managed edits.
The installer refuses to overwrite or remove non-EnvVault-managed files.
The default install flow avoids sudo and avoids /usr/local/bin.

Database discovery

The CLI can discover the EnvVault app database and can infer project/profile defaults from .envvault.json when commands run inside a configured project. If database discovery fails, pass --db <path> or set ENVVAULT_DB_PATH.