{
  "id": "fnox",
  "name": "fnox",
  "homepage": "https://fnox.jdx.dev/",
  "description": "A secret management tool for developers.",
  "executables": [
    "fnox"
  ],
  "dotfiles": {
    "paths": [
      "~/.config/fnox/"
    ],
    "secret": [
      "~/.config/fnox/config.toml"
    ]
  },
  "commands": {
    "format": 1,
    "label": "Run with secrets",
    "description": "Run a command with fnox secrets in its environment. Profiles, leases and other fnox subcommands are not covered.",
    "quality": "ai-draft",
    "parser": {
      "end_of_options": "--",
      "interleave": "permute",
      "long_equals": true,
      "short_attached": false,
      "short_bundles": false
    },
    "subcommand": [
      {
        "path": [
          "exec"
        ],
        "label": "Run a command with secrets",
        "source": [
          {
            "id": "docs",
            "kind": "manual",
            "url": "https://fnox.jdx.dev/cli/exec",
            "revision": "docs/cli/exec.md on main",
            "evidence": "- Usage: `fnox exec [FLAGS] [COMMAND]...`\n- [COMMAND]... -- Command to run, with its arguments\n- --except <NAME> -- Do not resolve these secrets; repeatable\n- --only <NAME> -- Resolve only these secrets, plus the secrets they depend on; repeatable\n- --redact -- Replace secret values with [REDACTED] in piped or redirected output\n- --no-redact -- Never redact output, even if the config or FNOX_EXEC_REDACT enables it\nPut fnox options before `--`; everything after it is the command.\n"
          }
        ],
        "field": [
          {
            "id": "only",
            "label": "Only these secrets",
            "description": "Secret names or globs such as AWS_*.",
            "type": "string",
            "option": [
              "--only"
            ],
            "multiple": true,
            "sources": [
              "docs"
            ]
          },
          {
            "id": "except",
            "label": "Except these secrets",
            "type": "string",
            "option": [
              "--except"
            ],
            "multiple": true,
            "sources": [
              "docs"
            ]
          },
          {
            "id": "redact",
            "label": "Redact secrets in output",
            "type": "boolean",
            "option": [
              "--redact"
            ],
            "sources": [
              "docs"
            ]
          },
          {
            "id": "command",
            "label": "Command",
            "description": "The command and its arguments, run after `--`.",
            "type": "string",
            "position": 0,
            "multiple": true,
            "min": 1,
            "sources": [
              "docs"
            ]
          }
        ],
        "task": [
          {
            "id": "run",
            "label": "Run a command",
            "fields": [
              "command",
              "only",
              "redact"
            ],
            "required": [
              "command"
            ]
          }
        ],
        "group": [
          {
            "id": "basic",
            "label": "Basic",
            "fields": [
              "command",
              "only",
              "except",
              "redact"
            ]
          }
        ]
      }
    ]
  }
}