SecretCarousel + Aider

Install and signup

# One command. Instant API key. Saved to project.
npx secretcarousel signup my-project --local

# Key saved to .sc/config.json (add .sc/ to .gitignore)

Add to your .aider.conf.yml

Paste this into your project's .aider.conf.yml file.

# SecretCarousel Integration

This project uses SecretCarousel for encrypted secret management.
CLI: npx secretcarousel (or sc if global). Key in .sc/config.json.

## Storing secrets
sc secret "NAME" "VALUE" [-t database-credentials|api-key|certificate|custom]

## Retrieving secrets
sc secret show <secretId>

## Listing secrets
sc secrets [--type X] [--env X]

## Updating
sc secret update <secretId> --value "new-value"

## Rotating (Pro plan)
sc rotate <secretId>

## Sharing (Pro plan)
sc share <secretId> --hours 1 --views 1

## Export .env
sc env pull --env production > .env

## Audit
sc audit [--action secret.read] [--limit 20]

## Patterns
- Use sc --json for structured output
- Secret IDs: secret-uuid (auto-generated)
- AES-256-GCM encrypted at rest
- Config: .sc/config.json

Use it

# Store a credential
sc secret "DATABASE_URL" "postgres://user:pass@host/db" -t database-credentials

# Retrieve
sc secret show sec-abc123

# Export for deployment
sc env pull --env production > .env

# Rotate after incident
sc rotate sec-abc123