Workspace daily loop
Create once from the app, then open terminal, guarded terminal, or agents from the same folder.
Start with Vault → Add secrets → Set up a project, or Set up a project in Workspace Center. Select a project folder to review its secrets, environments, and agent setup together. Use Import files for standalone credentials. To reuse a vault folder, right-click it and choose Convert to workspace….
Commit-safe config
.authsia/workspace.json holds name, folder, env files, and agent rules — not plaintext secrets.
Nearest workspace wins
Commands search upward for workspace config. A nested config is a separate workspace.
Env before depth
Active Production tags beat deeper Default items. Same-tier ties fail closed.
Parent stays clean
Guarded launches inject plaintext only into new child processes.