deleting-op-secrets

# Overview

This skill enables agents to delete or archive secrets in 1Password using the `op` CLI. It supports permanent deletion for items no longer needed and archiving for items that might need to be recovered later.

The skill assumes the `op` CLI is installed and the user is already authenticated.

# Table of Contents

- [Overview](#overview)
- [Table of Contents](#table-of-contents)
- [Supported Operations](#supported-operations)
- [Workflow](#workflow)
  - [Phase 1: Context Assessment](#phase-1-context-assessment)
  - [Phase 2: Delete Execution](#phase-2-delete-execution)
- [Reference Documentation](#reference-documentation)

# Supported Operations

| Operation | Use Case |
|-----------|----------|
| Delete Item | Permanently remove an item from 1Password |
| Archive Item | Move an item to Archive for potential recovery |

# Workflow

## Phase 1: Context Assessment

### Step 1: Understand the Request

Determine what the user wants to delete or archive:

1. **Identify the target item**:
   - Item name or ID
   - Vault location (if known or ambiguous)

2. **Identify the operation type**:
   - Permanent deletion (item removed completely)
   - Archive (item moved to Archive, recoverable)

3. **Assess the situation**:
   - Is the credential compromised? (permanent delete recommended)
   - Might the item be needed later? (archive recommended)
   - Is this a cleanup of test/duplicate items? (permanent delete)

4. **Clarify if needed**:
   - If item name is ambiguous, ask for vault or use item ID
   - If operation type is unclear, recommend archive as safer option

## Phase 2: Delete Execution

### Step 2: Confirm Deletion

Before executing a destructive operation, confirm with the user:

1. **For permanent deletion**:
   - Warn that this action cannot be undone
   - Confirm the correct item is targeted
   - Suggest archive as alternative if appropriate

2. **For archiving**:
   - Confirm the item will be moved to Archive
   - Explain that archived items can be restored via 1Password app

### Step 3: Execute Delete Command

Based on the context assessment, execute the appropriate `op` command.

See [op CLI Delete Command Reference](references/op-delete-commands.md) for complete command syntax.

**Permanent deletion**:
```bash
op item delete "<item-name>"
```

**Permanent deletion from specific vault**:
```bash
op item delete "<item-name>" --vault "<vault>"
```

**Archive item**:
```bash
op item delete "<item-name>" --archive
```

**Archive from specific vault**:
```bash
op item delete "<item-name>" --vault "<vault>" --archive
```

### Step 4: Handle Errors

Common errors and resolutions:

| Error | Resolution |
|-------|------------|
| `item not found` | Verify item name, try listing items in vault |
| `vault not found` | List available vaults with `op vault list` |
| `more than one item matches` | Use item ID instead of name, or specify vault with `--vault` |
| `permission denied` | Verify vault access permissions |

# Reference Documentation

- [op CLI Delete Command Reference](references/op-delete-commands.md) - Complete command syntax for delete and archive operations