@noah/bitwarden-secrets

Use Bitwarden Secrets Manager with Kody to securely store and use secrets in packages and ad hoc scripts, without ever exposing them to an AI agent.

AGENTS.md

28 lines · 732 B · Markdown

@noah/bitwarden-secrets

Imports

import status from 'kody:@noah/bitwarden-secrets'

Do not import kody:@noah/bitwarden-secrets/secretProvider. That export is sealed.

Placeholders

{{secret/bitwarden:i/<secret-uuid>/value}}
{{secret/bitwarden:i/<secret-uuid>/key}}
{{secret/bitwarden:i/<secret-uuid>/note}}

Smoke tests

After bind, from execute, call an approved https host with the placeholder in a header. Assert the error is not "No secret provider is bound". Do not print resolved values.

Edge cases

Name-based refs are rejected; UUID only
Empty config.hosts fails closed
Door key must be 0.<uuid>.<secret>:<b64-16-byte-key>
Machine account must be granted the secret's project