1#:schema https://fnox.jdx.dev/schema.json
2#
3# The one secret the daemon needs, DECLARED and nothing else: no value and no provider is written
4# here, so there is nothing to leak and nothing to choose for you. fnox is optional. Without it the
5# daemon reads the name from its environment. To use it, put your own provider in fnox.local.toml
6# (gitignored) or in ~/.config/fnox/config.toml, for example age or 1Password.
7#
8# `tools/with-secrets.sh` (used by `mise run serve`) runs a command under `fnox exec` when fnox is
9# installed and resolves this, and runs it plainly otherwise.
10
11# A name nobody has provided is left unset (the daemon then runs, judges nothing, and `status` says
12# `no key`), not an error here.
13if_missing = "ignore"
14
15[secrets.TYPESAFE_API_KEY]
16description = "Jev (TypeSafe) key; without it every verdict is pass"