envx-cli

Use when working in a project that manages secrets with envx (envx-cli): .env.<stage> files, .env.<stage>.gpg encrypted files, an .envrc passphrase file, an .envxrc JSON config, or registered secret files (certs, keystores, service-account JSON). Covers encrypting/decrypting env files, running commands with injected secrets, managing secret files, and safety rules for handling plaintext secrets.

Full Claude Code successor to Cowork's project-docs-generator. Owns docs and code lifecycle after initial setup. Same 12-phase design flow (classify, business context, archetype, auth, modules, 20-step per-module loop, cross-cuts, confirmation, generation, verification, refinement, scaffolding) plus four code-aware gates - pre-flight (read CLAUDE.md and drift scan on session start), spec-first (refuse code without a spec), change-tracking (auto-trigger on code edits, rewrite docs, append pointer), validation (impl-vs-spec parity). Senior-architect mode - one focused question at a time, recommends with reasoning, pushes back on vague answers. Triggers - design project, plan app, generate docs, document features, audit docs, add feature or module, modify code, rename column, refactor, validate implementation, sync after refactor, create Asana user stories, file bugs to Asana. Output - docs/project/ plus CLAUDE.md and README, Mermaid diagrams, scaffolded code via BTS/shadcn/Amplify.