Envref – separating secrets from config in .env files

Show HN: Envref – separating secrets from config in .env files

Based, Envref – separating secrets from config in .env files works in show hn launch.

Profile

I wanted to test how far Claude Code (Opus 4.6) could go building a real CLI tool autonomously — not just scaffolding, but the full thing: CLI, backends, parser, tests, fuzz tests, docs, and a documentation site.The result is envref, a tool that replaces secret values in .env files with ref:// URIs pointing to where the secret actually lives:# .env — safe to commit APP_NAME=my-app DATABASE_URL=ref://secrets/database_url API_KEY=ref://secrets/api_keyConfig stays inline. Secrets stay in your OS keychain (or another backend). envref resolve merges them back together at runtime.It plugs into direnv, so resolution happens automatically when you cd into a project. The resolve pipeline is optimized

The company sits in the show hn launch segment, where it competes on its core product or service.

The company is listed at the Show HN launch stage of development.

Website: xcke.github.io/envref