v0.9.0

🎉 opx v0.9.0 - 1Password CLI Batching Daemon

🔒 Security Features

• Session Idle Timeout: Configurable automatic locking (default: 8 hours)
• TLS Encryption: All client-server communication encrypted
• Input Validation: Command injection and race condition protection
• Cache Security: Automatic clearing when sessions lock

🌐 Modern Unix Integration

• XDG Base Directory: Full compliance with proper config/data separation
• Backward Compatibility: Existing ~/.op-authd/ installations preserved

⚡ Performance & Reliability

• Request Coalescing: Eliminates duplicate concurrent secret reads
• Thread-Safe: Robust concurrent access throughout
• Memory Management: Automated cleanup with configurable intervals

Changelog

Features

• cdd487a: feat: sign release checksums with the maintainer's GPG key (@zach-source)

Others

• 1438c88: Merge pull request #3 from zach-source/fix/release-script-token-and-sign-gate (@zach-source)
• 4675b27: Merge pull request #4 from zach-source/feat/sign-release-checksums (@zach-source)
• 70eacd4: Merge pull request #5 from zach-source/fix/push-tag-before-release (@zach-source)
• 7973129: fix: make the release script survive a missing token or GPG key (@zach-source)
• 2aa8e43: fix: push the release tag before GoReleaser runs (@zach-source)

📦 Installation

Download binaries for your platform from the assets below.

Make binaries executable:

chmod +x op-authd opx

Quick Start:

# Start daemon (8-hour session timeout)
./op-authd --verbose

# Use client to read secrets
./opx read "op://Engineering/DB/password"

🔍 Security Verification

# Verify checksums
sha256sum -c checksums.txt

# Verify GPG signature (if available)
gpg --verify checksums.txt.sig checksums.txt

📋 Requirements

• 1Password CLI must be installed and authenticated
• Linux or macOS (Windows support planned)