Roadmap

Planned and proposed improvements — contributions welcome.

Shipped

Disambiguate same-named files in one vault. The 1Password document title is the file name, so two files that share a name but live in different folders — a target-based layout, e.g. Staging/GoogleService-Info.plist and Production/GoogleService-Info.plist — used to collide when they belong to the same vault. Each file's repo-relative path is now stored on the 1Password item as a custom path field and matched instead of the title alone.
Glob / folder patterns in files. With the path stored on the item, read can reconstruct each file's destination, so files accepts globs (e.g. Vault/**/*.staging.*) and folder shorthand (Certs/) — expanded against the local tree on write and matched against stored path fields on read. See Glob and folder patterns.
Homebrew formula. Installed from infinum/tap, with jq as a declared dependency. Replaces the curl-pipe-to-bash installer and --update. op stays a separate brew install --cask 1password-cli: it is cask-only, and a formula cannot depend on a cask.
Migration helper for projects moving off legacy secret-syncing scripts — an agent prompt that reads the old scripts, maps environments to 1Password vaults, generates .secrets.config.json, and verifies the round-trip.