feat(bitwarden): add Bitwarden Password Manager / Vaultwarden support via bw CLI

[Copilot]

• Research existing bitwarden plugin and similar CLI-based plugins (1password, keepass)
• Create bw-pm-cli-helper.ts for Bitwarden CLI interaction
• Add BitwardenPasswordManagerInstance class to plugin.ts
• Add @initBwp() root decorator
• Add bwp() resolver function (supports password, username, notes, totp, uri, and custom fields)
• Add bwSessionToken data type
• Update README.md with full documentation for the new functionality
• Add changeset
• Address code review: use unknown type for setAuth param; eliminate non-null assertions in bwp() process handler
• Fix lint error: move processBwCliError definition before its use (no-use-before-define)
• Update docs page (packages/varlock-website/src/content/docs/plugins/bitwarden.mdx) with Password Manager / Vaultwarden section, @initBwp() reference, bwp() resolver reference, and bwSessionToken data type

[changeset-bot]

🦋 Changeset detected

Latest commit: 78299e9

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@varlock/bitwarden-plugin	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@varlock/ci-env-info@585

npm i https://pkg.pr.new/varlock@585

npm i https://pkg.pr.new/@varlock/1password-plugin@585

npm i https://pkg.pr.new/@varlock/bitwarden-plugin@585

commit: 78299e9

[theoephraim]

@copilot - fix linting errors

[Copilot]

@copilot - fix linting errors

Fixed in 8bb972d — moved processBwCliError before its call site in bw-pm-cli-helper.ts to satisfy the no-use-before-define rule.

[theoephraim]

@copilot - update the docs page too

[Copilot]

@copilot - update the docs page too

Done in efa0a66. The docs page now covers both integrations side-by-side: a comparison table at the top, a full Password Manager / Vaultwarden section (prerequisites, Vaultwarden setup, auth steps, loading items, multiple instances), and the updated Reference section with @initBwp(), bwp(), and bwSessionToken.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	varlock-website	efa0a66	Commit Preview URL Branch Preview URL	Apr 10 2026, 07:32 PM

[theoephraim]

Ok this works but its awkward because you have to log in, then manually store the session token in your .env.local

I think I'll leave this in draft until we get the cache stuff merged. Then we can add a new bwpLogin() function which will let the user log in, and then cache the token.