penv reveal

Print one value; an agent session needs a person's approval.

Usage

penv reveal [--env <env>] [--approval <approval>] <key>

Every command also takes the global options.

Argument	Required	What it is
`<key>`	yes	The key to reveal.

Flag	What it does	Environment variable
`--env <env>`	The environment to read.	`PENV_ENV`
`--approval <approval>`	Print the value a person approved under this id.

Code	Name	What it means
`0`	`ok`	The command did what it says.
`1`	`error`	Something went wrong.
`2`	`auth`	Not signed in, or the credential was rejected.
`4`	`confirmation`	A person has to confirm. The JSON carries the command to replay.
`5`	`no_credential`	No credential is available and none can be obtained.
`6`	`environment_refused`	This identity may not read that environment.

This command can write a secret value to stdout. Under an agent session a person approves it in the console before the value prints.

penv run: Validate, then run a command with the values in its environment only.
penv guard: Write the harness rules that keep agents out of .env.
Coding agents
The audit log