WSL2 + 1Password CLI

I have a WSL2 system set up with NixOS  where I used to be able to use shell plugins (primarily the `gh` tool for GitHub) - but today it is not working, throwing an error message:

[ERROR] 2025/12/27 22:35:25 Shell Plugins can only be used with the 1Password app integration enabled.
To learn more about this feature, check out:
https://developer.1password.com/docs/cli/about-biometric-unlock/

This used to work - but unfortunately I don't know exactly _when_ it stopped working, I use the VM sporadically.

Config:

$ op plugin inspect
? Choose which CLI configuration to inspect: gh (GitHub)


GitHub CLI

Configured Aliases

✔ Alias for "gh" configured
✔ Aliases sourced (/home/gac/.config/op/plugins.sh)

Configured Credentials

✔ Configured as global default:
CREDENTIAL TYPE                 ITEM                            VAULT
GitHub Personal Access Token    GitHub Personal Access Token    Private

Versions:

$ uname -a
Linux wsl 6.6.87.2-microsoft-standard-WSL2 #1 SMP PREEMPT_DYNAMIC Thu Jun  5 18:30:46 UTC 2025 x86_64 GNU/Linux
$ nixos-version
25.11.20251226.f560cce (Xantusia)
$ op --version
2.32.0
$ wsl.exe --version
WSL version: 2.6.3.0
Kernel version: 6.6.87.2-1
WSLg version: 1.0.71
MSRDC version: 1.2.6353
Direct3D version: 1.611.1-81528511
DXCore version: 10.0.26100.1-240331-1435.ge-release
Windows version: 10.0.26200.7462

If biometric login is a hard requirement then this is problematic to say the least as this is a desktop - there is no Windows Hello and no biometric capability. The documentation page does redirect to a different page about app integration, however this seems to only cover common use cases such as "I am using Windows and I want access to 1Password from Powershell" or "I have macOS and want access from the native terminal with `bash`/`zsh`". There doesn't seem to be any advice for running within a WSL2 virtual machine where 1Password is running _outside_ of the VM and I need access for shell plugins _inside_ the VM...

Any tips or advice?