onepassword-clilisted

# onepassword-cli Drive the 1Password CLI (`op`, currently 2.30.0) on this machine. Auth is **desktop-app integration + Touch ID**, so there is no password or `eval $(op signin)` step. The golden rule: **resolve secrets into commands/files, never echo them into the terminal.** ## This machine's setup - **Two accounts** (target with `--account <addr>` or `export OP_ACCOUNT=<addr>`): - Personal (**default for personal work**): `my.1password.eu` - Work: run `op account list` for the address. It is deliberately not written down here: this repo is public, and the employer's tenant plus work email do not belong in it. `op account list` is also the only source that stays right. - **Personal vaults**: `Development`, `Private` (holds most logins + all API credentials), `Shared`, `Shared Notes`. - **Auth quirks** (expected, not bugs): - `op whoami` prints `account is not signed in` even when commands work — app integration has no classic session token. Don't treat it as an error. - Commands trigger a Touch ID prompt that **times out fast** (`authorization timeout`). If you see that, just **rerun the same command** and approve promptly. - `~/.config/op/` is **gitignored** (device ID is sensitive). Never store this skill or any resolved secret there, and never commit that directory. ## Quick start ```bash export OP_ACCOUNT=my.1password.eu # target the personal account for the session op vault list # Development / Private