From 33c662b8ea6e8b37a2461ba74b6bcd1d16f6011f Mon Sep 17 00:00:00 2001
From: Amolith <amolith@secluded.site>
Date: Thu, 5 Feb 2026 12:17:17 -0700
Subject: [PATCH] feat(bash): load fnox secrets for agent shells

---
 dot_config/bash/bashrc.tmpl | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/dot_config/bash/bashrc.tmpl b/dot_config/bash/bashrc.tmpl
index 9151275820f423feeabf7505e291e51ae58a35cc..39b812a9e3bb3900bed35b1d209ce77b010f1714 100644
--- a/dot_config/bash/bashrc.tmpl
+++ b/dot_config/bash/bashrc.tmpl
@@ -97,6 +97,10 @@ fi
 if [[ -f "$XDG_CONFIG_HOME/fnox/age.txt" ]]; then
     export FNOX_AGE_KEY=$(grep "AGE-SECRET-KEY" "$XDG_CONFIG_HOME/fnox/age.txt")
     if command -v fnox &> /dev/null; then
+{{ if eq .chezmoi.username "exedev" }}
+        # Load secrets immediately for non-interactive shells (e.g., agents)
+        eval "$(mise exec fnox@latest -- fnox hook-env -s bash 2>/dev/null || true)"
+{{ end }}
         eval "$(mise exec fnox@latest -- fnox activate bash 2>/dev/null || true)"
     fi
 fi