Prepare a shell environment with help from a 1Password vault

op-env.sh

# Prepare a shell environment with help from a 1Password vault
#
# Prepares a shell environment by reading the `script` field from an item with
# the given NAME inside the `Environments` vault and then evaluating it in the
# current shell after injecting 1Password references.
#
# Usage:
#
# op-env <NAME>
#
# Example:
#
# op-env npm
#
# The `script` field for the `hello-world` item in the `Environments` vault:
#
# export GITHUB_ACTOR="{{ op://${vault}/GitHub/username }}"
# export GITHUB_TOKEN="{{ op://${vault}/GitHub/Personal Access Tokens/read_packages }}"
op-env() {
  local name="${1}"
  local vault="Private"

  # Read the template from the Environments vault
  local tpl=
  tpl="$(op read -n "op://Environments/${name}/script")"
  [ $? -ne 0 ] && return

  # Inject variables and evaluate 1Password references
  local script=
  script="$(echo -n "${tpl}" | vault="${vault}" env_name="${name}" op inject --cache)"
  [ $? -ne 0 ] && return

  # Print and evaluate the final script
  echo "${script}"
  eval "${script}"
}