feat(shell): sops on every shell-enabled host #1225

Merged

lytedev merged 1 commit from propose/shell-sops into main

2026-09-25 16:52:04 -05:00

lytedev commented

2026-09-25 15:52:06 -05:00

Owner

See the commit.

🤖 Generated with Claude Code

https://claude.ai/code/session_01KxYeGJ2Q3az5ZyhfJC5xR8

See the commit. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01KxYeGJ2Q3az5ZyhfJC5xR8

lytedev added 1 commit

2026-09-25 15:52:07 -05:00

feat(shell): sops on every shell-enabled host

/ build (push) Has been skipped

Details

/ check-format (push) Successful in 10s

Details

b2abd98ef3

Secrets in this repo are decrypted ad hoc from a shell with the
operator's age key (e.g. pi's OpenRouter key is fetched per request
with `sops --decrypt --extract ... secrets/dragon/secrets.yml`), but
sops was only on PATH inside this flake's devShell, so the same command
failed from any other directory or from a tool's subprocess.

Tested: nix eval shows sops in environment.systemPackages for dragon
and for the darwin example-mac config.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KxYeGJ2Q3az5ZyhfJC5xR8

lytedev merged commit b2abd98ef3 into main

2026-09-25 16:52:04 -05:00

lytedev deleted branch propose/shell-sops

2026-09-25 16:52:05 -05:00