klavex 0.1.3

Klavex CLI — pull environment variables into a process without writing secrets to disk.

klavex

CLI for Klavex. Pulls environment variables from your team's vault and injects them into a child process — secrets never touch disk.

pip install klavex
klavex login
klavex run -- npm start

See IMPLEMENTATION.md for the design.

Commands

Command	Status
klavex login	v0.1
klavex logout	v0.1
klavex whoami	v0.1
klavex status	v0.1
klavex projects	v0.2
klavex envs <project>	v0.2
klavex vars -e <env>	v0.2
klavex run -e <env> -- <cmd>	v0.3 (blocked on backend reveal endpoint)
klavex export -e <env>	v0.4
klavex use -p <project> -e <env>	v0.4

Development

pip install -e ".[dev]"
klavex --version
pytest
ruff check .
mypy

Override the API URL for staging or local:

export KLAVEX_API_URL=http://localhost:8000

Agents & CI (non-interactive auth)

For an agent seat (minted in the dashboard) or a CI runner, there's no browser for klavex login. Pass the token via the environment instead — it takes precedence over the keychain and needs no OS keychain at all:

export KLAVEX_TOKEN=kx_agent_...        # the token shown once when you mint the seat
klavex run -e env_xxx -- npm test       # scoped to exactly the envs you granted

Use environment IDs (env_xxx) or a committed .klavex pin for agents — name lookups hit team-level endpoints that scoped agent tokens can't read.