theholocron/holocron

Holocron

A pluggable, capability-based CLI for spinning up and operating software projects — your own infrastructure-as-tool.

Installation

This repository is a workspace root — it is not published. See the packages under packages/ for the tools it ships.

Quickstart

# 1. Install the CLI + the source plugin and a vault plugin
pnpm add -g @theholocron/cli@alpha
pnpm add -D @theholocron/holocron-plugin-github@alpha

# Vault — pick one: 1password, doppler, or infisical
pnpm add -D @theholocron/holocron-plugin-doppler@alpha
# or: pnpm add -D @theholocron/holocron-plugin-1password@alpha
# or: pnpm add -D @theholocron/holocron-plugin-infisical@alpha

Create the config (e.g. holocron.config.{ts | js | json}

// 2. Drop a holocron.config.ts at your repo root
import { defineConfig } from "@theholocron/cli";
import { node } from "@theholocron/holocron-config";

const { repo, workflows, providers } = node();
export default defineConfig({
	description: "Custom app that does custom things.",
	repo: {
		teams: [{ slug: "gatekeepers", permission: "maintain" }],
		topics: ["automation", "cli", "developer-tools", "holocron", "nodejs", "typescript"],
		...repo,
	},

providers: { ...providers, vault: ["doppler", { project: "holocron", config: "dev" }], secrets: "github", environments: "github", }, agent: "claude", skills: ["git-safety", "pr-workflow", "commit-standards", "security-review", "holocron-skill-plugin", "turborepo"], });

<!-- prettier-ignore -->

3. Store fine-grained PATs in the OS keyring (once per machine)

holocron auth set github.read ghp... # clone + CI holocron auth set github.admin ghp... # setup + secrets + environments

See docs/tokens.md for the full list of feature tokens and required scopes.

4. Verify the wiring

holocron doctor

Every additional capability (`ci`, `secrets`, `deployment`, `storage`,
`auth`, …) is one plugin install + one line of config away. The rest
of this README is the full picture.

## The idea

Many projects share the same setup work: pick a hosting provider, a
database, an auth provider, a secret vault, a CI host. Wire all the
secrets, the workflows, the deploys, the issue tracker. Holocron
makes that work **declarative, swappable, and re-runnable**.

// holocron.config.json
{
  "name": "my-app",

  "providers": {
    // Code + CI
    "source": "github",
    "ci": "github",
    "secrets": "github",
    "environments": "github",
    "issues": "github",

"deployment": ["vercel", { "team": "my-team" }], "storage": ["neon", { "kind": "postgres" }], "auth": "clerk", "dns": "cloudflare",