I built Oneseal: a small CLI that turns platform outputs (Terraform state, etc.) into a typed, versioned SDK you can install and import. The goal is to make consumption predictable and diffable, not to replace your vault.
What it does - Reads outputs (secrets, URLs, flags, IDs, connection strings)
- Generates a package (TypeScript today) with types + multi-env selection
- Deterministic artifacts, safe to commit or publish to your internal registry.
If this solves your env-drift pain, tell me where it breaks in your stack !