Add the 1Password CLI.

.prototools

@@ -15,6 +15,7 @@ grpcurl = "1.9.3"
 helm = "4.2.3"
 kind = "0.32.0"
 kubeconform = "0.8.0"
+op = "2.39.0"
 prek = "0.4.5"
 rumdl = "0.2.14"
 shellcheck = "0.11.0"
@@ -45,6 +46,7 @@ grpcurl = "file://./grpcurl/plugin.toml"
 helm = "file://./helm/plugin.toml"
 kind = "file://./kind/plugin.toml"
 kubeconform = "file://./kubeconform/plugin.toml"
+op = "file://./op/plugin.toml"
 prek = "file://./prek/plugin.toml"
 rumdl = "file://./rumdl/plugin.toml"
 shellcheck = "file://./shellcheck/plugin.toml"

op/README.md

@@ -0,0 +1,26 @@
+# op plugin
+
+[1Password CLI](https://developer.1password.com/docs/cli/) plugin for
+[proto](https://github.com/moonrepo/proto).
+
+## Installation
+
+op is not built into proto, so register this plugin, pin a version, then install:
+
+```shell
+proto plugin add op "https://raw.githubusercontent.com/Genesis-Embodied-AI/proto-plugins/main/op/plugin.toml"
+proto pin op latest --resolve
+proto install op
+```
+
+## Bumping to a new release
+
+1Password does not publish a version index, so `plugin.toml` carries an explicit
+`resolve.versions` list. Add the new release there before pinning it anywhere:
+
+```shell
+curl -s https://app-updates.agilebits.com/check/1/0/CLI2/en/2.0.0   # latest version
+```
+
+Releases are announced in the [1Password CLI release
+notes](https://app-updates.agilebits.com/product_history/CLI2).

op/plugin.toml

@@ -0,0 +1,32 @@
+name = "op"
+type = "cli"
+
+# 1Password ships the CLI only as versioned archives on cache.agilebits.com.
+# There is no public repository to read tags from, and the update endpoint
+# (app-updates.agilebits.com/check/1/0/CLI2/en/2.0.0) answers with a single
+# object while proto's manifest resolver requires an array, so the supported
+# versions have to be listed here. A version absent from this list cannot be
+# pinned by any consumer: add it here first.
+[resolve]
+versions = ["2.39.0"]
+
+[install.arch]
+aarch64 = "arm64"
+x86_64 = "amd64"
+
+# Every archive is flat: the binary next to a detached .sig. Upstream publishes
+# no checksum file, hence no checksum-url. There is also no windows arm64 build.
+[platform.linux]
+download-file = "op_linux_{arch}_v{version}.zip"
+exe-path = "op"
+
+[platform.macos]
+download-file = "op_darwin_{arch}_v{version}.zip"
+exe-path = "op"
+
+[platform.windows]
+download-file = "op_windows_{arch}_v{version}.zip"
+exe-path = "op.exe"
+
+[install]
+download-url = "https://cache.agilebits.com/dist/1P/op2/pkg/v{version}/{download_file}"