Skip to content

chezmoi skill: safe-edit workflow apply --dry-run needs a Bitwarden-unlock caveat #29

Description

@nickvigilante

The chezmoi skill's safe-edit workflow (added in #26) prescribes chezmoi apply --dry-run as a drift check before applying.

On this machine that step renders secret-templated files (~/.env, ~/.kube/homelab.yaml, ~/.zshenv, …), which shell out to bw.
If Bitwarden is locked / has no BW_SESSION, the dry-run prompts for the master password and can hard-crash — bitwarden-cli throws an unhandled promise rejection when its token is expired (invalid_grant).

Ask: update the safe-edit workflow in home/dot_claude/skills/chezmoi/SKILL.md to either:

  • bw-apply (unlock) before the dry-run, or
  • scope the dry-run to non-secret paths (e.g. chezmoi apply --dry-run ~/.claude).

Observed 2026-06-22 while syncing after a reboot.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions