Crate envo 

envo - a typed .env manager.

Modules:

• schema - parse the .envo typed schema
• envfile - parse/write dotenv files
• resolve - layer schema defaults, env files, secrets, process env
• validate - check a resolved environment against the schema
• crypto - encrypt/decrypt secrets at rest
• scan - detect leaked secrets
• hook - manage the git pre-commit hook

Modules

cli

Command-line surface (clap derive).

commands

Command handlers. Each returns the process exit code to use.

crypto

Encryption at rest for secrets files.

envfile

Parsing and writing of dotenv-style KEY=VALUE files, plus the small shared helpers (quoting, identifier checks) used across the crate.

hook

Install/remove a managed pre-commit hook that runs envo scan --staged.

output

Minimal ANSI styling with TTY / NO_COLOR detection. No external deps.

resolve

Layered resolution of environment values.

scan

Secret-leak detection: regex rules for well-known credential formats, plus verbatim matching of the values of secret-typed schema variables.

schema

The .envo schema: a tiny typed declaration language for environment variables. Each non-empty, non-comment line is NAME: type [= default], with an optional trailing ? to mark the variable optional.

validate

Validate a resolved environment against a schema.