onepassword-clilisted

# onepassword-cli Drive the 1Password CLI (`op`, currently 2.30.0) on this machine. Auth is **desktop-app integration + Touch ID**, so there is no password or `eval $(op signin)` step. The golden rule: **resolve secrets into commands/files, never echo them into the terminal.** ## This machine's setup - **Two accounts** (target with `--account <addr>` or `export OP_ACCOUNT=<addr>`): - Personal (**default for personal work**): `my.1password.eu` (magnus.rodseth@gmail.com) - Work: `capragroup.1password.eu` (mar@capraconsulting.no) - **Personal vaults**: `Development`, `Private` (holds most logins + all API credentials), `Shared`, `Shared Notes`. - **Auth quirks** (expected, not bugs): - `op whoami` prints `account is not signed in` even when commands work — app integration has no classic session token. Don't treat it as an error. - Commands trigger a Touch ID prompt that **times out fast** (`authorization timeout`). If you see that, just **rerun the same command** and approve promptly. - `~/.config/op/` is **gitignored** (device ID is sensitive). Never store this skill or any resolved secret there, and never commit that directory. ## Quick start ```bash export OP_ACCOUNT=my.1password.eu # target the personal account for the session op vault list # Development / Private / Shared / Shared Notes op item list --vault Private # titles only (safe) op read "op://Private/Cargo API Token/token" # one field; pipe it,