1password

**Judgement:** A strong, production-oriented integration for 1Password CLI that emphasizes correct setup, reliable auth flows, and secure secret handling. Best suited for environments where tmux and the 1Password desktop app are available and properly configured. **What it does well:** - Strictly follows official 1Password CLI documentation for installation and setup, reducing platform-specific breakage. - Enforces use of a dedicated tmux session with a fresh socket for all `op` commands, mitigating TTY/authentication issues common in automated shells. - Verifies sign-in state (`op whoami`) before secret access and accommodates multi-account configurations. - Strong guardrails around secret safety: no secrets in logs or chat, and preference for `op run` / `op inject` over writing to disk. **Key risks / limitations:** - Hard dependency on tmux; if tmux is unavailable or misconfigured, the workflow cannot proceed and requires user intervention. - Assumes presence and correct configuration of the 1Password desktop app for integration and interactive authorization. - Relies on external 1Password documentation for some steps, so changes upstream could affect future compatibility. **Recommended scenarios:** - Securely managing secrets for CLI tools and scripts in an environment that already uses 1Password. - Setting up persistent, reliable 1Password CLI usage in CI-like or multi-command workflows where TTY/auth issues often occur. - Teams prioritizing strong secret hygiene (no plaintext secrets in logs or files) and needing multi-account 1Password support.