I built Oneseal: a small CLI that turns platform outputs (Terraform state, etc.) into a typed, versioned SDK you can install and import. The goal is to make consumption predictable and diffable, not to replace your vault.

What it does - Reads outputs (secrets, URLs, flags, IDs, connection strings)

- Generates a package (TypeScript today) with types + multi-env selection

- Deterministic artifacts, safe to commit or publish to your internal registry.

If this solves your env-drift pain, tell me where it breaks in your stack !