DigiNews

Summary

enveil provides per-project encrypted storage for environment secrets, preventing plaintext .env data from being exposed to AI coding tools and runtime processes. It uses Argon2id to derive a key and AES-256-GCM to encrypt a local store, with ev:// references resolved at runtime and secrets never written in plaintext to disk.