SecretsWorks
1Password / Bitwarden / pass
Use your shell's secret tooling — Watchfire reads from the environment.
What is 1Password / Bitwarden / pass?
Watchfire deliberately doesn't ship a secret manager. Your shell already has one — Watchfire just reads what the shell exports and tells the agent what's available.
1Password / Bitwarden / pass + Watchfire
- Source environment variables the way you already do — Watchfire doesn't replace your secret manager.
- 1Password CLI (op), Bitwarden CLI (bw), pass, direnv — anything that exports variables into your shell before running Watchfire.
- Tell the agent what's available via the secrets instructions file; Watchfire never reads or stores your secret values.
Setup
Document each secret in the instructions file the agent reads at start. Values stay in the environment; descriptions live in Watchfire.
# .watchfire/secrets/instructions.md
## Available environment variables
- OPENAI_API_KEY — OpenAI API key for the test fixtures.
- DATABASE_URL — Local Postgres connection string, set by 1Password CLI.Ready to go
Get started with Watchfire
Install in seconds. Define tasks. Let agents ship code for you.
Download for macOSAvailable for macOS, Linux, and Windows
install
# Install via Homebrew (macOS)$
brew tap watchfire-io/tap$
brew install --cask watchfire-io/tap/watchfire# Set up your project and go$
watchfire init$
watchfire task add "Build the login page"$
watchfire start --allIncludes GUI, CLI, and daemon. Also available via Homebrew.