Method ResolvedKey

internal/config/config.go:234–242

ResolvedKey returns the profile's key, expanding it against the process environment when the WHOLE key is a `${VAR}` reference (the advertised form; see the config.yaml header). Lets config.yaml carry `key: ${MY_KEY}` instead of a plaintext secret: the reference is what round-trips on Save, the expa

()

// ExpandEnv has no escape syntax to opt out. Use this at every site that
// dials out or branches on "is this profile keyed".
func (p *Profile) ResolvedKey() string {
	key := p.Key
	if name, ok := strings.CutPrefix(key, "${"); ok {
		if name, ok = strings.CutSuffix(name, "}"); ok && isEnvName(name) {
			return os.Getenv(name)
		}
	}
	return key
}

// isEnvName reports whether s is a POSIX environment variable name
// ([A-Za-z_][A-Za-z0-9_]*), the only content ${...} expands.