dotsecenv

Maintain and tidy dotsecenv vault files: describe structure, run health checks, and compact away superseded secret versions. Use when the user wants to inspect or clean up a vault rather than read or write individual secrets. Triggers on: vault describe, vault doctor, doctor, compact vault, shrink vault, clean up vault, remove old or superseded secret versions, prune secret versions, vault is bloated, vault is ugly, defragment vault.

Keep the website changelog (website/src/content/docs/changelog.mdx) building up continuously, one entry per PR. Use when opening a PR (add a one-line entry under "Upcoming"), when preparing a release (stamp "Upcoming" to the version tag), or to assess which merged PRs are missing from the changelog. Triggers on: changelog, release notes, upcoming, changelog entry, add changelog, before release, release PR.

Check the website CLI reference (website/src/content/docs/reference.mdx) for drift against the actual dotsecenv CLI, and run it before cutting a release. Use when preparing a release, when asked to verify the CLI docs are in sync or check reference drift, or after adding or changing a command or flag. Triggers on: release, cli reference drift, reference out of date, docs in sync, before release, new command, new flag.

Manage GPG-encrypted environment secrets using dotsecenv CLI. Use when the user asks to store, retrieve, list, share, revoke, or inspect secrets in .secenv vault files. Also use when the user mentions dotsecenv, secenv, vault secrets, GPG secret management, or environment encryption. Triggers on: store secret, get secret, list secrets, share secret, revoke access, vault describe, vault doctor, secret management.

Interpret .secenv files and resolve dotsecenv vault references. Use when the user asks about .secenv files, wants to create or edit them, debug why a secret isn't loading, understand vault configuration, or troubleshoot the shell plugin. Triggers on: .secenv, secenv file, secret not loading, vault path, dotsecenv config, shell plugin.