deep-env

# deep-env - Credential Management

Use this skill to manage environment variables securely across all of Andrew's Macs.

## Architecture

**All credentials are stored in a SINGLE keychain entry as JSON.** This means only ONE keychain password prompt, ever - no matter how many credentials you have.

## When to Use This Skill

Automatically invoke this skill when:
- You see a `.env.example`, `.env.template`, or `.env.sample` file without a corresponding `.env.local`
- User provides an API key, secret, or credential
- Error messages mention missing environment variables (e.g., "ANTHROPIC_API_KEY is not defined")
- Setting up or cloning a new project
- User asks about credentials, secrets, or environment variables

## Known Projects

| Shortcut | Project | Path |
|----------|---------|------|
| `dp` | Deep Personality | `~/Deep-Personality` |

## Global vs Project-Specific Credentials

Credentials can be:
- **Global**: Available to all projects (e.g., ANTHROPIC_API_KEY, SUPABASE_*)
- **Project-specific**: Only for one project (e.g., ADMIN_EMAILS for Deep Personality)

### Current Project Assignments

**Global (all projects):**
- ANTHROPIC_API_KEY
- GMAIL_USER, GMAIL_APP_PASSWORD
- NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY
- SUPABASE_SERVICE_ROLE_KEY
- FIRECRAWL_API_KEY, APIFY_API_KEY

**Deep-Personality only:**
- ADMIN_EMAILS
- API_SECRET_KEY
- NEXT_PUBLIC_APP_URL

## Commands

### Sync credentials to a project
```bash
deep-env sync .                    # Current directory
deep-env sync ~/Deep-Personality   # Specific path
deep-env sync dp                   # Using shortcut
```

### Store credentials

```bash
# Global credential (available to all projects)
deep-env store ANTHROPIC_API_KEY "sk-ant-xxx"

# Project-specific credential
deep-env store -p dp ADMIN_EMAILS "admin@example.com"
deep-env store --project deep-personality API_SECRET_KEY "xxx"

# Push to iCloud after storing
deep-env push
```

### Assign existing keys to projects

```bash
# Assign to D