Varlock: AI-Safe Environment Variable Management with Schema-Driven Validation

Varlock: AI-Safe Environment Variable Management with Schema-Driven Validation

Varlock is a universal configuration and secrets management tool built on the @env-spec specification. It delivers type-safe environment variables, multi-environment support, and secure secret handling, all governed by a schema file (.env.schema) that acts as the single source of truth for project configuration.

Designed for AI-driven development, Varlock lets coding agents read the schema to understand required variables without exposing actual secret values. Key features include proactive leak scanning via varlock scan and git hooks, runtime log redaction, and validation with coercion for enhanced IntelliSense.

Plugins connect to external backends like 1Password, Infisical, AWS, Azure, GCP, and HCP Vault. Although written in TypeScript, Varlock is language-agnostic, working with any project relying on environment variables at build or boot time.