James Washington
writing about archive utils free game ideas replays
Command-line tool

devenv-* Keychain secret helpers

One locked vault for all ~41 API keys, with commands to add or read a secret without it appearing on screen.

built Aug 2026 updated Oct 2026 The server in the closet

how it works

zsh functions over one Keychain item holding base64 NAME=VALUE lines; devenv-set prompts hidden and confirms with a fingerprint; devenv-get -c copies to clipboard.

Command-line tool: A small program run from the terminal.

clikeychainsecretszsh

related

  • One Keychain item for all shell secrets (base64 or bust) Technique Keep every API key in one locked vault instead of in shell config files, without slowing down new terminals.
  • Headless shells need 0600 token files Technique Remote terminal sessions can't open the Mac's password vault, so they need separate locked-down token files.
  • seed-headless-tokens Command-line tool Sets up the login tokens that remote terminal sessions need, entered hidden at the console.
  • dev-tunnel Command-line tool Opens the home server's dev websites on the laptop.
  • Obsidian vault as an iPhone<->agent message bus Technique When typing long messages into the AI from a phone breaks, write them in a notes app that syncs instead.
← everything I've built
© 2026 James Washington
github twitter rss