@qui-cli/env-1password 1.1.0 → 1.2.1

package/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 All notable changes to this project will be documented in this file. See [commit-and-tag-version](https://github.com/absolute-version/commit-and-tag-version) for commit guidelines.
 
+## [1.2.1](https://github.com/battis/qui-cli/compare/env-1password/1.2.0...env-1password/1.2.1) (2025-12-23)
+
+
+### Bug Fixes
+
+* fix crucial typo in documentation ([5fca554](https://github.com/battis/qui-cli/commit/5fca55433d9c8261122614c7786954bde779d63a))
+
+## [1.2.0](https://github.com/battis/qui-cli/compare/env-1password/1.1.0...env-1password/1.2.0) (2025-12-23)
+
+
+### Features
+
+* load 1Password credentials from environment ([d5de5ae](https://github.com/battis/qui-cli/commit/d5de5aeeddc75364cde33621efc60bf3fbb36ad8))
+
+
+### Bug Fixes
+
+* successfully use `op item get` to look up service account token ([07cdaff](https://github.com/battis/qui-cli/commit/07cdaffda9a4ab39b95ad1f482596a46481f754e))
+
 ## [1.1.0](https://github.com/battis/qui-cli/compare/env-1password/1.0.5...env-1password/1.1.0) (2025-12-19)
 
 

package/dist/1Password.d.ts

@@ -1,14 +1,20 @@
 import { Env } from '@qui-cli/env';
 import * as Plugin from '@qui-cli/plugin';
 export type Configuration = Plugin.Configuration & Env.Configuration & {
-    /** 1Password service account token */
+    /**
+     * 1Password service account token; will use the environment variable
+     * OP_TOKEN if present
+     */
     opToken?: string;
     /**
      * Name or ID of the 1Password API Credential item storing the 1Password
-     * service account token
+     * service account token; will use environment variable OP_ITEM if present
      */
     opItem?: string;
-    /** 1Password account to use (if signed into multiple) */
+    /**
+     * 1Password account to use (if signed into multiple); will use environment
+     * variable OP_ACCOUNT if present
+     */
     opAccount?: string;
     /** @deprecated Use {@link opToken} */
     serviceAccountToken?: string;

package/dist/1Password.js

@@ -20,9 +20,9 @@ export async function configure(proposal = {}) {
         const silent = Shell.isSilent();
         const showCommands = Shell.commandsShown();
         Shell.configure({ silent: true, showCommands: false });
-        const { stdout, stderr } = Shell.exec(`op item get ${config.opAccount ? `--account "${config.opAccount}" ` : ''}--reveal "${config.opItem}"`);
+        const { stdout, stderr } = Shell.exec(`op item get ${config.opAccount ? `--account "${config.opAccount}" ` : ''}--reveal --fields credential "${config.opItem}"`);
         if (stdout.length) {
-            config.opToken = stdout;
+            config.opToken = stdout.trim();
         }
         else {
             Log.fatal(stderr);
@@ -56,28 +56,30 @@ export function options() {
                 text: 'Store 1Password secret references in your environment, rather than the actual secrets.'
             },
             {
-                text: `If 1Password secret references are stored in the environment, a 1Password service account token is required to access the secret values, which will be loaded into ${Colors.value('process.env')}. The service account token can be passed directly as the ${Colors.optionArg('--opToken')} argument (e.g. ${Colors.command(`${Colors.keyword('example')} --opToken "(${Colors.keyword('op')} item get SERVICE_ACCOUNT_TOKEN)"`)}) or, if the 1Password CLI tool is also installed, by simply passing the name or ID of the API Credential in your 1Password vault that holds the service account token (e.g. ${Colors.command(`${Colors.keyword('example')} --opItem SERVICE_ACCOUNT_TOKEN`)}). If you are signed into multiple 1Password account, use the ${Colors.optionArg('--opAccount')} argument to specify the account containing the token.`
+                text: `If 1Password secret references are stored in the environment, a 1Password service account token is required to access the secret values, which will be loaded into ${Colors.value('process.env')}. The service account token can be passed directly as the ${Colors.optionArg('--opToken')} argument (e.g. ${Colors.command(`${Colors.keyword('example')} --opToken "$(${Colors.keyword('op')} item get myToken)"`)}) or, if the 1Password CLI tool is also installed, by simply passing the name or ID of the API Credential in your 1Password vault that holds the service account token (e.g. ${Colors.command(`${Colors.keyword('example')} --opItem myToken`)}). If you are signed into multiple 1Password account, use the ${Colors.optionArg('--opAccount')} argument to specify the account containing the token.`
             },
             { text: Colors.url('https://developer.1password.com/docs/cli') }
         ],
         opt: {
             opAccount: {
-                description: `1Password account to use (if signed into multiple)`,
+                description: `1Password account to use (if signed into multiple); will use environment variable ${Colors.varName('OP_ACCOUNT')} if present`,
                 hint: 'example.1password.com',
                 default: config.opAccount
             },
             opItem: {
-                description: `Name or ID of the 1Password API Credential item storing the 1Password service account token`,
+                description: `Name or ID of the 1Password API Credential item storing the 1Password service account token; will use environmen variable ${Colors.varName('OP_ITEM')} if present`,
+                hint: '1Password unique identifier',
                 default: config.opItem
             },
             opToken: {
-                description: `1Password service account token`,
+                description: `1Password service account token; will use environment variable ${Colors.varName('OP_TOKEN')} if present`,
+                hint: 'token value',
                 secret: true,
                 default: config.opToken || config.serviceAccountToken
             },
             serviceAccountToken: {
-                description: `1Password service account token`,
-                hint: 'Deprecated',
+                description: `1Password service account token (deprecated, use ${Colors.optionArg('--opToken')})`,
+                hint: 'token value',
                 secret: true,
                 default: config.serviceAccountToken
             }
@@ -85,7 +87,8 @@ export function options() {
     };
 }
 export async function init({ values }) {
-    await configure(values);
+    const { opAccount = process.env.OP_ACCOUNT, opItem = process.env.OP_ITEM, opToken = process.env.OP_TOKEN } = values;
+    await configure({ opAccount, opItem, opToken, ...values });
     parse();
 }
 function isSecretReference(value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qui-cli/env-1password",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "@qui-cli Plugin: Standardized environment configuration",
   "homepage": "https://github.com/battis/qui-cli/tree/main/packages/env-1password#readme",
   "repository": {
@@ -23,15 +23,15 @@
   },
   "devDependencies": {
     "@tsconfig/node20": "^20.1.8",
-    "@types/node": "^24.10.3",
+    "@types/node": "^24.10.4",
     "commit-and-tag-version": "^12.6.1",
     "del-cli": "^6.0.0",
     "npm-run-all": "^4.1.5",
     "typescript": "^5.9.3",
-    "@qui-cli/env": "5.0.2",
     "@qui-cli/colors": "3.1.1",
-    "@qui-cli/plugin": "4.0.0",
     "@qui-cli/log": "4.0.1",
+    "@qui-cli/env": "5.0.2",
+    "@qui-cli/plugin": "4.0.0",
     "@qui-cli/root": "3.0.4",
     "@qui-cli/shell": "3.0.3"
   },