Branch-aware resolution
Map branches to environments and compose personal, team, and feature overlays without copying files.
Explore feature →CLI-FIRST Configuration contracts and signed snapshots →
Your configuration has a working tree.
Jnana is a CLI-first toolkit that discovers, versions, resolves, and safely delivers every environment variable and config file—across branches, developers, CI, and production.
✓ Local encryption✓ Git-aware environments✓ Optional hosted control plane
atlas-commerce / feature/billingUnlocked
EFFECTIVE CONFIGURATION
One validated plan for this checkout.
01
+developmentBase · 18 values
02
+joseph/localPersonal · 4 values
03
stripe/testOverlay · 7 values
◇
Policy check passedNo production resources referenced.
42 readyDATABASE_URLAWS Secrets ManagerReady
STRIPE_SECRET_KEYJnana · stripe/testReady
REDIS_URLEncrypted Jnana vaultReady
◫
Snapshot signed43 settings · 4 sources
just nowStop passing .env files through Slack.
Stop rebuilding config from memory.
Stop wondering what production received.
THE CONFIGURATION WORKSPACE
Everything between Git and your secrets manager.
Keep values encrypted, keep structure reviewable, and make every checkout reproducible.
Configuration contracts
Scan code to discover required settings, types, consumers, and gaps before runtime.
Explore feature →Signed snapshots
Create value-free receipts proving exactly which versions and providers produced a deployment.
Explore feature →Provider-agnostic
Resolve from Jnana, AWS Secrets Manager, 1Password, Git defaults, and your own adapters.
Explore feature →Policy before exposure
Block production values on unsafe branches and require approvals for sensitive environments.
Explore feature →CLI, containers, everywhere
Hydrate local checkouts, CI jobs, and Docker services; manage metadata from installed companions.
Explore feature →LOCAL KEYS BY DESIGNRead the security model →
The root key stays with the developer.
The CLI encrypts before upload, decrypts at the checkout boundary, and keeps unlocked keys in a bounded local agent. The browser editor is an optional companion and also encrypts locally.
✓ Keychain-backed local CLI agent
✓ Keyed fingerprints for safe deduplication
✓ Ciphertext-only hosted storage
✓ Value-free deployment receipts
J
Your valuesencrypted locally
Plaintext→AES-256-GCM→Ciphertext
Only ciphertext reaches Jnana infrastructure.THE PRIMARY INTERFACE
One command from clone to configured.
The CLI owns repository discovery, Git context, encryption, local key access, filesystem writes, and process injection. Web, mobile, and desktop are control and visibility companions.
Follow the five-minute quickstart →$ jnana init
$ jnana contract scan --write
$ jnana unlock --ttl 30m
$ jnana hydrate
✓ 42 settings resolved from 4 sources
✓ .env written with 0600 permissionsSIMPLE FROM DAY ONE
Start with the CLI. Add the team later.
Developer
Free
For personal projects and local workflows
Install the CLI- ✓CLI + local agent
- ✓3 hosted projects
- ✓Unlimited local snapshots
- ✓Installed companions
Team
$15/ user / month
For engineering teams shipping together
Join the Team beta- ✓Unlimited projects
- ✓Policies and approvals
- ✓Provider connections
- ✓Audit history
Enterprise
Custom
For regulated and complex organizations
Talk to us- ✓SSO and directory sync
- ✓Workload federation
- ✓Dedicated deployment
- ✓Security review support