Mike Swanson
da87d314c5
Add .claude/scripts/log-skill-error.sh — the canonical agent error log helper (writes errorlog.md in DATE | MACHINE | skill | [type] error format, soft-fails). Three categories: execution failures (default), user corrections (--correction), and preventable self-inflicted friction (--friction; cite ref= when it repeats a documented gotcha). Goal: stop paying tokens twice for the same avoidable mistake. - CLAUDE.md: make logging mandatory for all skills + corrections + friction. - skill-creator: new skills must wire in the helper (guidance + checklist). - Retrofit every skill script's genuine failure branches to call the helper (b2/bitdefender/mailprotector/packetdial/coord python CLIs; remediation-tool + onboard365 bash; vault, rmm-auth, post-bot-alert, agy, grok, 1password, run-onboarding-diagnostic). Handled conditions + self-tests left alone. - errorlog.md: broaden header to cover skills + harness + corrections; seed this session's corrections (INKY, Mail.Send token-audience, omnibox-strictness) and friction (git-bash /tmp, env-persistence, argv-limit, PowerShell var-case). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
98 lines
3.0 KiB
Bash
Executable File
98 lines
3.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# store_secret.sh — Store or update a secret in 1Password
|
|
#
|
|
# Usage:
|
|
# bash store_secret.sh --title "My API Key" --field "api_key" --value "sk-..."
|
|
# bash store_secret.sh --title "Project Creds" --vault Dev --category API_CREDENTIAL
|
|
# bash store_secret.sh --update --title "Existing Item" --field "api_key" --value "new-value"
|
|
# bash store_secret.sh --from-env MY_VAR # Store from environment variable
|
|
|
|
set -euo pipefail
|
|
|
|
# Functional-error logger (skill name "1password"); 4 levels up to the ClaudeTools repo.
|
|
CLAUDETOOLS_ROOT="${CLAUDETOOLS_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../.." && pwd)}"
|
|
_logerr() { bash "$CLAUDETOOLS_ROOT/.claude/scripts/log-skill-error.sh" "1password" "$@" >/dev/null 2>&1 || true; }
|
|
|
|
TITLE=""
|
|
FIELD="credential"
|
|
VALUE=""
|
|
VAULT=""
|
|
CATEGORY="API_CREDENTIAL"
|
|
UPDATE=false
|
|
FROM_ENV=""
|
|
GENERATE=false
|
|
GENERATE_LENGTH=32
|
|
|
|
while [[ $# -gt 0 ]]; do
|
|
case $1 in
|
|
--title) TITLE="$2"; shift 2 ;;
|
|
--field) FIELD="$2"; shift 2 ;;
|
|
--value) VALUE="$2"; shift 2 ;;
|
|
--vault) VAULT="$2"; shift 2 ;;
|
|
--category) CATEGORY="$2"; shift 2 ;;
|
|
--update) UPDATE=true; shift ;;
|
|
--from-env) FROM_ENV="$2"; shift 2 ;;
|
|
--generate) GENERATE=true; shift ;;
|
|
--length) GENERATE_LENGTH="$2"; shift 2 ;;
|
|
*) echo "Unknown option: $1"; exit 1 ;;
|
|
esac
|
|
done
|
|
|
|
# Validate
|
|
if [[ -z "$TITLE" ]]; then
|
|
read -rp "Item title: " TITLE
|
|
fi
|
|
|
|
# Get value from env var if requested
|
|
if [[ -n "$FROM_ENV" ]]; then
|
|
VALUE="${!FROM_ENV:-}"
|
|
if [[ -z "$VALUE" ]]; then
|
|
echo "❌ Environment variable $FROM_ENV is not set or empty"
|
|
exit 1
|
|
fi
|
|
FIELD="${FROM_ENV}"
|
|
echo "Using value from \$$FROM_ENV"
|
|
fi
|
|
|
|
# Generate a secure credential if requested
|
|
if $GENERATE; then
|
|
VALUE=$(openssl rand -base64 "$GENERATE_LENGTH" | tr -d '=+/' | head -c "$GENERATE_LENGTH")
|
|
echo "🔐 Generated secure credential ($GENERATE_LENGTH chars)"
|
|
fi
|
|
|
|
# Prompt for value if still empty
|
|
if [[ -z "$VALUE" ]]; then
|
|
read -rsp "Value (hidden): " VALUE
|
|
echo ""
|
|
fi
|
|
|
|
VAULT_FLAG=""
|
|
[[ -n "$VAULT" ]] && VAULT_FLAG="--vault $VAULT"
|
|
|
|
if $UPDATE; then
|
|
echo "Updating '${FIELD}' in '${TITLE}'..."
|
|
op item edit "$TITLE" $VAULT_FLAG "${FIELD}[password]=${VALUE}" \
|
|
|| { rc=$?; _logerr "op item edit failed (update secret)" --context "item=$TITLE field=$FIELD vault=${VAULT:-default} rc=$rc"; exit $rc; }
|
|
echo "✅ Updated '${FIELD}' in '${TITLE}'"
|
|
else
|
|
echo "Creating '${TITLE}' in 1Password..."
|
|
RESULT=$(op item create \
|
|
--category "$CATEGORY" \
|
|
--title "$TITLE" \
|
|
$VAULT_FLAG \
|
|
"${FIELD}[password]=${VALUE}" \
|
|
--format=json) \
|
|
|| { rc=$?; _logerr "op item create failed" --context "item=$TITLE category=$CATEGORY vault=${VAULT:-default} rc=$rc"; exit $rc; }
|
|
|
|
ITEM_ID=$(echo "$RESULT" | jq -r '.id')
|
|
VAULT_NAME=$(echo "$RESULT" | jq -r '.vault.name')
|
|
|
|
echo "✅ Created '${TITLE}' (ID: ${ITEM_ID})"
|
|
echo ""
|
|
echo "Secret reference:"
|
|
echo " op://${VAULT_NAME}/${TITLE}/${FIELD}"
|
|
echo ""
|
|
echo "Read it back:"
|
|
echo " op read \"op://${VAULT_NAME}/${TITLE}/${FIELD}\""
|
|
fi
|