fnox.local.toml is not automatically sourced in shell if fnox.toml does not exist

[deevus]

I am using fnox in a project that otherwise does not need it for development.

So I have created a fnox.local.toml file and added it to .gitignore.

1. If there is no fnox.toml alongside it, fnox does not load secrets into the shell environment automatically. It works fine if I run fnox exec -- ...
2. If I create an empty fnox.toml file, secrets are loaded into the shell environment.

Is this expected behaviour?

[jdx]

Thanks for the report! I've been investigating this and I'm unable to reproduce the issue. My testing shows that fnox.local.toml works correctly on its own without fnox.toml:

# Create directory with only fnox.local.toml
mkdir test && cd test
cat > fnox.local.toml << 'EOF'
[providers.plain]
type = "plain"

[secrets.MY_SECRET]
provider = "plain"
value = "my-secret-value"
EOF

# All of these work:
fnox get MY_SECRET           # Returns "my-secret-value"
fnox exec -- env | grep MY   # Shows MY_SECRET=my-secret-value
fnox hook-env -s bash        # Outputs export statements correctly

Could you help me understand your setup better?

1. How did you enable shell integration? Did you add eval "$(fnox activate bash)" (or similar for your shell) to your shell profile (~/.bashrc, ~/.zshrc, etc.)?

2. What do you see when you manually run fnox hook-env -s bash (replace bash with your shell) in the directory with only fnox.local.toml?

3. Are there any fnox.toml files in parent directories? You can check with git ls-files '**/fnox.toml' | head or by searching upward from your project directory.

4. What's in your fnox.local.toml? (You can redact sensitive values)

5. What shell are you using? (bash, zsh, fish)

This information will help me understand if there's an edge case I'm missing.

[deevus]

1. **How did you enable shell integration?** Did you add `eval "$(fnox activate bash)"` (or similar for your shell) to your shell profile (~/.bashrc, ~/.zshrc, etc.)?

$ cat ~/.zshrc | grep fnox
eval "$(fnox activate zsh)"

2. **What do you see when you manually run `fnox hook-env -s bash`** (replace `bash` with your shell) in the directory with only `fnox.local.toml`?

Outputs nothing

3. **Are there any `fnox.toml` files in parent directories?** You can check with `git ls-files '**/fnox.toml' | head` or by searching upward from your project directory.

There are none.

4. **What's in your `fnox.local.toml`?** (You can redact sensitive values)

default_provider = "pass"

[providers.pass]
type = "password-store"
prefix = "**redacted**"

[secrets]
JIRA_API_TOKEN = { provider = "pass", value = "JIRA_API_TOKEN" }

5. **What shell are you using?** (bash, zsh, fish)

zsh

---

It seems to be working on and off now. I have one shell where it is not working, and one where it is. I'm confused 😕