confit
One TOML file with interpolation and pluggable providers. Resolve secrets, inject env vars, run commands — no more sourcing dotfiles.
curl -fsSL https://raw.githubusercontent.com/krondor-corp/confit/main/install.sh | bash
Resolve
Config values with {path.to.value} interpolation, $(...) shell eval, and pluggable scheme:// providers.
Protect
Wrap any value with secret:// to mask it in output. Transparent to run and ssh.
Run
Inject resolved config as environment variables and exec your command. Keys never touch disk.